CLEANSTART-2026-KE07618 Security fixes in helm-operator 1.42.3-r1

Package helm-operator version 1.42.3-r1 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-UQ50946 Security fixes in helm 4.1.3-r0

Package helm version 4.1.3-r0 fixes 21 vulnerabilities: CVE-2026-42501, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817...

CLEANSTART-2026-VY72501 Security fixes in helm-operator-fips 1.41.1-r0

Package helm-operator-fips version 1.41.1-r0 fixes 3 vulnerabilities: ghsa-9h84-gmv7-982p, ghsa-mf38-5pwr-xv68, ghsa-x4rx-4gw5-53pq...

CLEANSTART-2026-ZH15042 Security fixes in helm-fips 3.20.2-r1

Package helm-fips version 3.20.2-r1 fixes 1 vulnerabilities: ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-QP97203 Security fixes in helm 4.0.5-r2

Package helm version 4.0.5-r2 fixes 43 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27143, CVE-2026-27144...

CLEANSTART-2026-CY22332 Security fixes in helm-operator 1.42.2-r1

Package helm-operator version 1.42.2-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-LL09783 Security fixes in helm 4.0.0-r0

Package helm version 4.0.0-r0 fixes 1 vulnerabilities: CVE-2025-61729...

CLEANSTART-2026-CL16763 Security fixes in helm 4.0.1-r1

Package helm version 4.0.1-r1 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142...

CLEANSTART-2026-AU93241 Security fixes in helm-operator 1.42.1-r0

Package helm-operator version 1.42.1-r0 fixes 30 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-39820, ghsa-p77j-4mvh-x3m3, CVE-2026-27143, CVE-2026-42499...

CLEANSTART-2026-QV10539 Security fixes in helm 4.1.4-r0

Package helm version 4.1.4-r0 fixes 4 vulnerabilities: CVE-2026-50151, CVE-2026-50162, ghsa-vh4v-2xq2-g5cg, CVE-2026-48978...

CLEANSTART-2026-GH10343 Security fixes in helm-fips 3.17-4-r0

Package helm-fips version 3.17-4-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-NV73889 Security fixes in helm-fips 3.19.5-r0

Package helm-fips version 3.19.5-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-MR47325 Security fixes in helm 3.20.2-r0

Package helm version 3.20.2-r0 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-IE08886 Security fixes in helm-fips 4.0.5-r1

Package helm-fips version 4.0.5-r1 fixes 2 vulnerabilities: CVE-2026-1229, ghsa-q9hv-hpm4-hj6x...

CLEANSTART-2026-HJ82328 Security fixes in helm-fips 3.20.2-r0

Package helm-fips version 3.20.2-r0 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

helm-4.2.3-4.1 on GA media (moderate)

helm-4.2.3-4.1 on GA media Announcement ID: openSUSE-SU-2026:11386-1 Rating: moderate Cross-References: CVE-2026-63308 CVSS scores: CVE-2026-63308 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

PT-2026-66499

Name of the Vulnerable Software and Affected Versions OpenCost versions prior to 1.121.0 Description Authentication is not properly enforced for the 'GET /helmValues' endpoint, which exposes the base64-decoded HELM VALUES environment variable containing cloud provider credentials. Furthermore, th...

SUSE SLES15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:3342-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3342-1 advisory. Update to version 3.21.3. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for...

Security update for helm

This update for helm fixes the following issues: Update to version 3.21.3. CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. CVE-2026-56852: golang.org/x/text/unicode/norm: handling input...

SUSE-SU-2026:3342-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.21.3. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. - CVE-2026-56852: golang.org/x/text/unicode/norm: handling inp...