Backport of upgraded helm v3 to address GHSA-jw44-4f3j-q396 into rele…

…ase/1.4.x (#3773) * backport of commit e9e2250 * backport of commit 9a7a0e5 --------- Co-authored-by: Michael Wilkerson <[email protected]>
hashicorp · Mar 19, 2024 · 065589f · 065589f
1 parent 9fe4125
commit 065589f
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/.release/security-scan.hcl b/.release/security-scan.hcl
@@ -39,6 +39,8 @@ binary {
         # NET-8174 (2024-02-26): Missing YAML Content Leads To Panic (requires malicious plugin)
         "GHSA-r53h-jv2g-vpx6", 
         "CVE-2024-26147", # alias
+        "GHSA-jw44-4f3j-q396", # Tracked in NET-8174
+        "CVE-2019-25210" # alias
       ]
     }
   }

diff --git a/scan.hcl b/scan.hcl
@@ -39,6 +39,8 @@ repository {
         # NET-8174 (2024-02-26): Missing YAML Content Leads To Panic (requires malicious plugin)
         "GHSA-r53h-jv2g-vpx6", 
         "CVE-2024-26147", # alias
+        "GHSA-jw44-4f3j-q396", # Tracked in NET-8174
+        "CVE-2019-25210" # alias
       ]
     }
   }