Security update for helm
This update for helm fixes the following issues: Update to version 3.10.3: - CVE-2022-23524: Fixed a denial of service in the string value parsing (bsc#1206467). - CVE-2022-23525: Fixed a denial of service with the repository index file (bsc#1206469). - CVE-2022-23526: Fixed a denial of service in the schema file handling (bsc#1206471).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for helm fixes the following issues: Update to version 3.10.3: - CVE-2022-23524: Fixed a denial of service in the string value parsing (bsc#1206467). - CVE-2022-23525: Fixed a denial of service with the repository index file (bsc#1206469). - CVE-2022-23526: Fixed a denial of service in the schema file handling (bsc#1206471).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1181419
- https://bugzilla.suse.com/1206467
- https://bugzilla.suse.com/1206469
- https://bugzilla.suse.com/1206471
- https://www.suse.com/security/cve/CVE-2021-21272
- https://www.suse.com/security/cve/CVE-2022-1996
- https://www.suse.com/security/cve/CVE-2022-23524
- https://www.suse.com/security/cve/CVE-2022-23525
- https://www.suse.com/security/cve/CVE-2022-23526
- https://www.suse.com/support/update/announcement/2022/suse-su-20224606-1/