OPENSUSE-SU-2025:14725-1 helm-3.17.0-2.1 on GA media

These are all security issues fixed in the helm-3.17.0-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: kube-bench, k8ssandra-operator-fips, smarter-device-manager, harbor-registry, velero-fips, sftpgo-plugin-geoipfilter, dockerize, secrets-store-csi-driver-provider-aws-fips, kafka-proxy, prometheus-operator, velero-plugin-for-aws, cass-operator-fips, ferretdb,...

PT-2025-4791

Name of the Vulnerable Software and Affected Versions Cilium versions 1.14.0 through 1.14.7 Cilium versions 1.15.0 through 1.15.11 Cilium versions 1.16.0 through 1.16.4 Description Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default...

CVE-2024-45338 affecting package helm for versions less than 3.15.2-2

CVE-2024-45338 affecting package helm for versions less than 3.15.2-2. A patched version of the package is available...

Moderate: Red Hat Enhancement Advisory: Advisory for publishing Helm 3.15.4 GA release

GA release of Helm 3.15.4 for OpenShift Container Platform 4.17 version. This errata advisory is for publishing the GA release of Helm 3.15.4 for OpenShift Container Platform 4.17 version...

CVE-2024-45338 affecting package helm for versions less than 3.14.2-5

CVE-2024-45338 affecting package helm for versions less than 3.14.2-5. A patched version of the package is available...

CVE-2022-36049 affecting package helm 3.4.1-17

CVE-2022-36049 affecting package helm 3.4.1-17. No patch is available currently...

CVE-2022-36055 affecting package helm 3.4.1-17

CVE-2022-36055 affecting package helm 3.4.1-17. No patch is available currently...

AZL-54413 CVE-2024-45338 affecting package helm for versions less than 3.15.2-2

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

CVE-2024-45338 vulnerabilities

Vulnerabilities for packages: kube-bench, prometheus-stackdriver-exporter, pulumi-kubernetes-operator, k8ssandra-operator-fips, smarter-device-manager, crossplane-provider-aws-kinesis, harbor-registry, buildkitd, velero-fips, sftpgo-plugin-geoipfilter, cloud-sql-proxy-fips, dockerize,...

AZL-54534 CVE-2024-45338 affecting package helm for versions less than 3.14.2-5

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

helm-3.16.4-1.1 on GA media (moderate)

helm-3.16.4-1.1 on GA media Announcement ID: openSUSE-SU-2024:14593-1 Rating: moderate Cross-References: CVE-2024-45337 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

OPENSUSE-SU-2024:14593-1 helm-3.16.4-1.1 on GA media

These are all security issues fixed in the helm-3.16.4-1.1 package on the GA media of openSUSE Tumbleweed...

Sensitive Information Disclosure

Rancher Manager is vulnerable to sensitive information disclosure. The vulnerability is due to Helm values being stored directly in the Apps Custom Resource Definition and leaking into audit logs when the audit level is set to 2 or above, allowing users with GET access to read sensitive informati...

GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: kube-bench, prometheus-stackdriver-exporter, pulumi-kubernetes-operator, crossplane-provider-aws-kinesis, harbor-registry, buildkitd, velero-fips, cloud-sql-proxy-fips, dockerize, kafka-proxy, prometheus-operator, crossplane, cert-manager-istio-csr, apko, ferretdb,...

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-SUSE-RU-2024:4213-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-SUSE-RU-2024:4213-1 advisory. helm was updated to fix the following issues: Update to version 3.16.3: fix: fix label name Fix typo in...

SUSE-RU-2024:4213-1 Recommended update for helm

helm was updated to fix the following issues: Update to version 3.16.3: fix: fix label name Fix typo in pkg/lint/rules/chartfiletest.go Increasing the size of the runner used for releases. fixhooks: correct hooks delete order Bump github.com/containerd/containerd from 1.7.12 to 1.7.23 Update to...

CVE-2024-52814

Argo Helm is a collection of community maintained charts for argoproj.github.io projects. Prior to version 0.45.0, the workflow-role lacks granularity in its privileges, giving permissions to workflowtasksets and workflowartifactgctasks to all workflow Pods, when only certain types of Pods create...

CVE-2024-52814 Helm Lacks Granularity in Workflow Role

Argo Helm is a collection of community maintained charts for argoproj.github.io projects. Prior to version 0.45.0, the workflow-role lacks granularity in its privileges, giving permissions to workflowtasksets and workflowartifactgctasks to all workflow Pods, when only certain types of Pods create...

CVE-2024-52814 Helm Lacks Granularity in Workflow Role

Argo Helm is a collection of community maintained charts for argoproj.github.io projects. Prior to version 0.45.0, the workflow-role lacks granularity in its privileges, giving permissions to workflowtasksets and workflowartifactgctasks to all workflow Pods, when only certain types of Pods create...