File _patchinfo of Package patchinfo.27250

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.27250

<patchinfo incident="27250">
  <issue tracker="bnc" id="1206469">VUL-0: CVE-2022-23525: helm,helm3: Denial of service through through repository index file</issue>
  <issue tracker="bnc" id="1181419">VUL-0: CVE-2021-21272: oras: zip-slip vulnerability</issue>
  <issue tracker="bnc" id="1206471">VUL-0: CVE-2022-23526: helm,helm3: Denial of service through schema file</issue>
  <issue tracker="bnc" id="1206467">VUL-0: CVE-2022-23524: helm3,helm: Denial of service through string value parsing</issue>
  <issue tracker="cve" id="2022-23526"/>
  <issue tracker="cve" id="2022-1996"/>
  <issue tracker="cve" id="2022-23524"/>
  <issue tracker="cve" id="2022-23525"/>
  <issue tracker="cve" id="2021-21272"/>
  <packager>dirkmueller</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for helm</summary>
  <description>This update for helm fixes the following issues:

Update to version 3.10.3:

- CVE-2022-23524: Fixed a denial of service in the string value parsing (bsc#1206467).
- CVE-2022-23525: Fixed a denial of service with the repository index file (bsc#1206469).
- CVE-2022-23526: Fixed a denial of service in the schema file handling (bsc#1206471).
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.27250

Places