Skip to content
OpenAdvisories
Medium RHSA-2024:4867 1 CVE

Red Hat Security Advisory: Release of openshift-serverless-clients kn 1.33.1 security update and bug fixes

Published Oct 1, 2024 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Serverless 1 serverless:1.0::el8 openshift-serverless-clients 0:1.12.0-10.el8

Vulnerabilities 1

  • Medium 5.3
    CVE-2024-24789

    Mishandling of corrupt central directory record in archive/zip

    The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file…

    Go standard library archive/zip golang go Debian Ubuntu Azure Linux Alpine Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_openshift_serverless/1
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2292668
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2296266
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4867.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-24789
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-24789
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-24789