Security update for helm

This update for helm fixes the following issues: Update to version 3.17.1: CVE-2024-45338: Fixed denial of service due to non-linear parsing of case-insensitive content bsc1235318. CVE-2024-45337: Fixed misuse of ServerConfig.PublicKeyCallback to prevent authorization bypass in golang.org/x/crypt...

SUSE-SU-2025:0602-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.17.1: - CVE-2024-45338: Fixed denial of service due to non-linear parsing of case-insensitive content bsc1235318. - CVE-2024-45337: Fixed misuse of ServerConfig.PublicKeyCallback to prevent authorization bypass in...

Azure Linux 3.0 Security Update: cert-manager / helm (CVE-2024-26147)

The version of cert-manager / helm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26147 advisory. - Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an...

Azure Linux 3.0 Security Update: cert-manager / helm / moby-cli / moby-compose / moby-engine (CVE-2023-2253)

The version of cert-manager / helm / moby-cli / moby-compose / moby-engine installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2253 advisory. - A flaw was found in the /v2/catalog endpoint in...

Azure Linux 3.0 Security Update: cert-manager / helm (CVE-2024-25620)

The version of cert-manager / helm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-25620 advisory. - Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources...

CVE-2022-36049

Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...

CVE-2020-4062

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

CVE-2024-29037

datahub-helm provides the Kubernetes Helm charts for deploying Datahub and its dependencies on a Kubernetes cluster. Starting in version 0.1.143 and prior to version 0.2.182, due to configuration issues in the helm chart, if there was a successful initial deployment during a limited window of tim...

helm-3.17.0-2.1 on GA media (moderate)

helm-3.17.0-2.1 on GA media Announcement ID: openSUSE-SU-2025:14725-1 Rating: moderate Cross-References: CVE-2024-45338 CVSS scores: CVE-2024-45338 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2024-45338 SUSE : 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2025:14725-1 helm-3.17.0-2.1 on GA media

These are all security issues fixed in the helm-3.17.0-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, sftpgo-plugin-geoipfilter, neuvector-fips, splunk-otel-collector-fips, dex-k8s-authenticator, actions-runner-controller, stakater-reloader, golangci-lint, supercronic, cilium-envoy, kube-state-metrics-fips, tflint, karpenter-fips, kube-vip-fips,...

PT-2025-4791 · Cilium +1 · Cilium +1

Name of the Vulnerable Software and Affected Versions: Cilium versions 1.14.0 through 1.14.7 Cilium versions 1.15.0 through 1.15.11 Cilium versions 1.16.0 through 1.16.4 Description: Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default...

CVE-2024-45338 affecting package helm for versions less than 3.15.2-2

CVE-2024-45338 affecting package helm for versions less than 3.15.2-2. A patched version of the package is available...

Moderate: Red Hat Enhancement Advisory: Advisory for publishing Helm 3.15.4 GA release

GA release of Helm 3.15.4 for OpenShift Container Platform 4.17 version. This errata advisory is for publishing the GA release of Helm 3.15.4 for OpenShift Container Platform 4.17 version...

CVE-2024-45338 affecting package helm for versions less than 3.14.2-5

CVE-2024-45338 affecting package helm for versions less than 3.14.2-5. A patched version of the package is available...

CVE-2022-36055 affecting package helm 3.4.1-17

CVE-2022-36055 affecting package helm 3.4.1-17. No patch is available currently...

CVE-2022-36049 affecting package helm 3.4.1-17

CVE-2022-36049 affecting package helm 3.4.1-17. No patch is available currently...

AZL-54413 CVE-2024-45338 affecting package helm for versions less than 3.15.2-2

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

CVE-2024-45338 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, sftpgo-plugin-geoipfilter, neuvector-fips, splunk-otel-collector-fips, dex-k8s-authenticator, actions-runner-controller, eksctl, kyverno-notation-aws, opentelemetry-collector, stakater-reloader, prometheus-stackdriver-exporter, external-dns,...

AZL-54534 CVE-2024-45338 affecting package helm for versions less than 3.14.2-5

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...