SUSE-SU-2026:21461-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.20.2. Security issued fixed: - CVE-2025-55199: specially crafted JSON Schema can lead to out of memory OOM termination bsc1248093. - CVE-2026-35206: specially crafted Chart will have contents extracted to immediate output...

SUSE SLES16: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:21434-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:21434-1 advisory. Update to version 3.20.2. Security issued fixed: - CVE-2025-55199: specially crafted JSON Schema can lead to out of memory OOM...

CVE-2025-55199 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, helm-push, trivy-fips, cerbos, trivy-operator-fips, headlamp-fips, chart-testing-fips, flux-source-controller-fips, zot, flux-source-controller, tw, flux-fips, flux-helm-controller, pluto-fips, chart-testing, linkerd2-fips, kots,...

CVE-2025-55199

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory OOM termination. This issue has been resolved in Helm 3.18.5. A workaround involves...