pkgsrc-WIP-changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

helm: Update to 3.10.3



Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Fri Dec 16 12:39:03 2022 +0100
Changeset:	a19ffee15c1b581dc3c81e4febb766d65eb25783

Modified Files:
	helm/Makefile
	helm/distinfo

Log Message:
helm: Update to 3.10.3

Changes:
3.10.3
------
Helm v3.10.3 is a security (patch) release. Users are strongly
recommended to update to this release.

While fuzz testing Helm, provided by the CNCF:

- a possible stack overflow was discovered with the strvals package.
  Stack overflow cannot be recovered from in Go. This can potentially be
  used to produce a denial of service (DOS) for SDK users. More details
  are available in the advisory:
  <https://github.com/helm/helm/security/advisories/GHSA-6rx9-889q-vv2r>
- a possible segmentation violation was discovered with the repo
  package. Some segmentation violations cannot be recovered from in Go.
  This can potentially be used to produce a denial of service (DOS) for
  SDK users. More details are available in the advisory:
  <https://github.com/helm/helm/security/advisories/GHSA-53c4-hhmh-vw5q>
- a possible segmentation violation was discovered with the chartutil
  package. This can potentially be used to produce a denial of service
  (DOS) for SDK users. More details are available in the advisory:
  <https://github.com/helm/helm/security/advisories/GHSA-67fx-wx78-jx33>

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=a19ffee15c1b581dc3c81e4febb766d65eb25783

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 helm/Makefile | 2 +-
 helm/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diffs:
diff --git a/helm/Makefile b/helm/Makefile
index 72544abff0..7174093c5a 100644
--- a/helm/Makefile
+++ b/helm/Makefile
@@ -1,6 +1,6 @@
 # $NetBSD$
 
-DISTNAME=	helm-3.10.2
+DISTNAME=	helm-3.10.3
 CATEGORIES=	net
 MASTER_SITES=	${MASTER_SITE_GITHUB:=helm/}
 GITHUB_TAG=	v${PKGVERSION_NOREV}
diff --git a/helm/distinfo b/helm/distinfo
index 576b9bf4dd..ed81a0906c 100644
--- a/helm/distinfo
+++ b/helm/distinfo
@@ -3159,9 +3159,9 @@ Size (gopkg.in_yaml.v3_@v_v3.0.1.zip) = 104623 bytes
 BLAKE2s (gotest.tools_v3_@v_v3.0.2.mod) = b4f333a7c099f249aa6ec71938f5d15d5a4d636c6f7d3717740e655856f0a1d0
 SHA512 (gotest.tools_v3_@v_v3.0.2.mod) = 795de820e4a8622de316ee1b391a9c92476b3a67eee387278cd79f818c275df687ccacc60afbba20491dd813e442fa5a10d84b8b138f712c5a8705e884cb1d42
 Size (gotest.tools_v3_@v_v3.0.2.mod) = 194 bytes
-BLAKE2s (helm-3.10.2.tar.gz) = 58ad17ccec0c1ec981202534bb1c53cf4a336312586edea449796633ce89c9ee
-SHA512 (helm-3.10.2.tar.gz) = a0bf3808d5c7ba68e1dccfcd090e0f2467347586f817cfb2bbdf3c6e8b136d3f2d9fb654ad10b579f968363f37186f2d842f295ef548391e208b7422878a3ef5
-Size (helm-3.10.2.tar.gz) = 701984 bytes
+BLAKE2s (helm-3.10.3.tar.gz) = 2b6e4c185d7b245c78bd329f1a185957023627058a6f232b8a2ae511c798be04
+SHA512 (helm-3.10.3.tar.gz) = 9b4daa2d4dc166b588dbbc7eaaf1152a406ac3fda498ca0a0b5fadd94f901fa96dad75e750e4faf8138ddf9707716f9daff3e5c2a5face1079bc2ff6aea43e67
+Size (helm-3.10.3.tar.gz) = 702374 bytes
 BLAKE2s (honnef.co_go_tools_@v_v0.0.0-20190102054323-c2f93a96b099.mod) = 38e66bb2bbbbabd21beff5a5718735267b1611dbdf7da56c7fb6500d6cb784f1
 SHA512 (honnef.co_go_tools_@v_v0.0.0-20190102054323-c2f93a96b099.mod) = d00ae74b24e7fb3ff351ff68b88e59636153bbcf92b36e81e91556e3e75a7ccfb08ce471f757f92fd7612378944de3d7309c73923812e2df6a26b74e999ca9ce
 Size (honnef.co_go_tools_@v_v0.0.0-20190102054323-c2f93a96b099.mod) = 26 bytes


Home | Main Index | Thread Index | Old Index