RHSA-2024:0880: Critical: Release of OpenShift Serverless Client kn 1.31.1 security update

Red Hat OpenShift Serverless Client kn 1.31.1 provides a CLI to interact with<br>Red Hat OpenShift Serverless 1.31.1. The kn CLI is delivered as an RPM package<br>for installation on RHEL platforms, and as binaries for non-Linux platforms.<br>This release includes security, bug fixes, and enhancements.<br>Security Fix(es):<br><li> go-git: Maliciously crafted Git server replies can cause DoS on go-git clients (CVE-2023-49568)</li> <li> go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients (CVE-2023-49569)</li> <li> golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests (CVE-2023-39326)</li> <li> ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)</li> A Red Hat Security Bulletin, which addresses further details about the Rapid<br>Reset flaw is available in the References section.<br>For more details about the security issue(s), including the impact, a CVSS<br>score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat