Security update for Multi-Linux Manager 5.0: Server, Proxy and Retail Server

Description: This update fixes the following issues: proxy-helm: Version 5.0.12: Image rebuilt to the newest version with updated dependencies proxy-httpd-image: Version 5.0.10: Fixed wrong IP address set on susemanager-tftpsync-recv.conf Image rebuilt to the newest version with updated...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: zarf, cilium-cli, zot, helm-operator, helm-docs, chart-testing, tw, trivy, k8ssandra-client, consul-k8s, kubescape, flux-source-controller, rancher-helm, pluto, chartmuseum, cluster-api-helm-controller, flux-helm-controller, k9s, flux, helm-push, cert-manager-cmctl,...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: zarf, cilium-cli, zot, helm-operator, helm-docs, chart-testing, tw, trivy, k8ssandra-client, consul-k8s, kubescape, flux-source-controller, rancher-helm, pluto, chartmuseum, cluster-api-helm-controller, flux-helm-controller, k9s, flux, helm-push, cert-manager-cmctl,...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: zarf, cilium-cli, zot, helm-operator, helm-docs, chart-testing, tw, trivy, k8ssandra-client, consul-k8s, kubescape, flux-source-controller, rancher-helm, pluto, chartmuseum, cluster-api-helm-controller, flux-helm-controller, k9s, flux, helm-push, cert-manager-cmctl,...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: zarf, cilium-cli, zot, helm-operator, helm-docs, chart-testing, tw, trivy, k8ssandra-client, consul-k8s, kubescape, flux-source-controller, rancher-helm, pluto, chartmuseum, cluster-api-helm-controller, flux-helm-controller, k9s, flux, helm-push, cert-manager-cmctl,...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: rancher-helm, flux-source-controller-fips, harbor-fips, flux-fips, eksctl, pluto, cert-manager-cmctl, k9s, k8ssandra-client-fips, helm-push, harbor, chartmuseum-fips, kubescape, cilium-cli, k8ssandra-client, flux-helm-controller-fips, flux-helm-controller, consul-k8s...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: rancher-helm, flux-source-controller-fips, harbor-fips, flux-fips, eksctl, pluto, cert-manager-cmctl, k9s, k8ssandra-client-fips, helm-push, harbor, chartmuseum-fips, kubescape, cilium-cli, k8ssandra-client, flux-helm-controller-fips, flux-helm-controller, consul-k8s...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: rancher-helm, flux-source-controller-fips, harbor-fips, flux-fips, eksctl, pluto, cert-manager-cmctl, k9s, k8ssandra-client-fips, helm-push, harbor, chartmuseum-fips, kubescape, cilium-cli, k8ssandra-client, flux-helm-controller-fips, flux-helm-controller, consul-k8s...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: rancher-helm, flux-source-controller-fips, harbor-fips, flux-fips, eksctl, pluto, cert-manager-cmctl, k9s, k8ssandra-client-fips, helm-push, harbor, chartmuseum-fips, kubescape, cilium-cli, k8ssandra-client, flux-helm-controller-fips, flux-helm-controller, consul-k8s...

BIT-HELM-2025-32387 Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow

Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack overflow. This issue has been resolved in Helm v3.17.3...

BIT-HELM-2025-32386 Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...

CVE-2024-52282 Rancher Helm Applications may have sensitive values leaked

A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowing any users with GET access to the Rancher Manager Apps Catalog to read any sensitive information that are contained within the Apps’ values. Additionally, the same information leaks into auditing lo...

SUSE CVE-2025-32386

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800x difference. When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issu...

SUSE CVE-2025-32387

Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack overflow. This issue has been resolved in Helm v3.17.3...

GO-2025-3601 Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination in helm.sh/helm

Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination in helm.sh/helm...

GO-2025-3602 Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow in helm.sh/helm

Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow in helm.sh/helm...

Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow

A Helm contributor discovered that a specially crafted JSON Schema within a chart can lead to a stack overflow. Impact A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack...

GHSA-5XQW-8HWV-WG92 Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow

A Helm contributor discovered that a specially crafted JSON Schema within a chart can lead to a stack overflow. Impact A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack...

GHSA-4HFP-H4CW-HJ8P Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

A Helm contributor discovered that a specially crafted chart archive file can cause Helm to use all available memory and have an out of memory OOM termination. Impact A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800...

Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

A Helm contributor discovered that a specially crafted chart archive file can cause Helm to use all available memory and have an out of memory OOM termination. Impact A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed e.g., 800...