CBL Mariner 2.0 Security Update: helm (CVE-2022-36055)

The version of helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-36055 advisory. - Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing,...

SUSE CVE-2022-36055

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. The strvals package contains a parser that turns strings in to Go...

Security fix for the ALT Linux 10 package helm version 3.10.2-alt1

3.10.2-alt1 built Dec. 8, 2022 Mikhail Gordeev in task 311367 Dec. 3, 2022 Mikhail Gordeev - new version 3.10.2 - Fixes: CVE-2022-36055 CVE-2022-36049 CVE-2021-32690 CVE-2021-21303...

CVE-2022-36055 affecting package helm for versions less than 3.9.4-2

CVE-2022-36055 affecting package helm for versions less than 3.9.4-2. An upgraded version of the package is available that resolves this issue...

SUSE SLED15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2022:3666-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3666-1 advisory. helm was updated to version 3.9.4: CVE-2022-36055: Fixed denial of service through string value...

CVE-2022-36055

creationtimestamp| type| source ---|---|--- 2022-09-01 16:38:03+00:00| seen| https://t.me/cibsecurity/49162...

CVE-2022-36055

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. The strvals package contains a parser that turns strings in to Go...

CVE-2022-36055 Denial of service in Helm

Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input to functions in the strvals package that can cause an out of memory panic. The strvals package contains a parser that turns strings in to Go...

CVE-2022-36055

CVE-2022-36055: Helm’s strvals parser could panic (OOM) on certain user-provided strings, enabling a Denial of Service when using flags like --set/--set-string. The initial description notes a fix in Helm v3.9.4. Publicly provided references in the connected documents corroborate the DoS vector a...