Описание
Security update for helm
This update for helm fixes the following issues
Security issues:
- CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758).
- CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the storage.delete.enabled configuration (bsc#1265428).
Non security issue:
- Fix packages for %suse_version bump (jsc#PED-15794).
- Update to version 3.21.0
Список пакетов
Container suse/kubectl:1.33
helm-3.21.0-150000.1.75.1
Container suse/kubectl:latest
helm-3.21.0-150000.1.75.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
helm-3.21.0-150000.1.75.1
helm-bash-completion-3.21.0-150000.1.75.1
helm-zsh-completion-3.21.0-150000.1.75.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
helm-3.21.0-150000.1.75.1
helm-bash-completion-3.21.0-150000.1.75.1
helm-zsh-completion-3.21.0-150000.1.75.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
helm-3.21.0-150000.1.75.1
helm-bash-completion-3.21.0-150000.1.75.1
helm-zsh-completion-3.21.0-150000.1.75.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
helm-3.21.0-150000.1.75.1
helm-bash-completion-3.21.0-150000.1.75.1
helm-zsh-completion-3.21.0-150000.1.75.1
SUSE Linux Enterprise Micro 5.5
helm-3.21.0-150000.1.75.1
helm-bash-completion-3.21.0-150000.1.75.1
SUSE Linux Enterprise Module for Containers 15 SP7
helm-3.21.0-150000.1.75.1
helm-bash-completion-3.21.0-150000.1.75.1
helm-zsh-completion-3.21.0-150000.1.75.1
SUSE Linux Enterprise Module for Package Hub 15 SP7
helm-fish-completion-3.21.0-150000.1.75.1
SUSE Linux Enterprise Server 15 SP4-LTSS
helm-3.21.0-150000.1.75.1
helm-bash-completion-3.21.0-150000.1.75.1
helm-zsh-completion-3.21.0-150000.1.75.1
SUSE Linux Enterprise Server 15 SP5-LTSS
helm-3.21.0-150000.1.75.1
helm-bash-completion-3.21.0-150000.1.75.1
helm-zsh-completion-3.21.0-150000.1.75.1
SUSE Linux Enterprise Server 15 SP6-LTSS
helm-3.21.0-150000.1.75.1
helm-bash-completion-3.21.0-150000.1.75.1
helm-zsh-completion-3.21.0-150000.1.75.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
helm-3.21.0-150000.1.75.1
helm-bash-completion-3.21.0-150000.1.75.1
helm-zsh-completion-3.21.0-150000.1.75.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
helm-3.21.0-150000.1.75.1
helm-bash-completion-3.21.0-150000.1.75.1
helm-zsh-completion-3.21.0-150000.1.75.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
helm-3.21.0-150000.1.75.1
helm-bash-completion-3.21.0-150000.1.75.1
helm-zsh-completion-3.21.0-150000.1.75.1
Ссылки
- Link for SUSE-SU-2026:2049-1
- E-Mail link for SUSE-SU-2026:2049-1
- SUSE Security Ratings
- SUSE Bug 1265428
- SUSE Bug 1265758
- SUSE CVE CVE-2026-33814 page
- SUSE CVE CVE-2026-41888 page
Описание
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
Затронутые продукты
Container suse/kubectl:1.33:helm-3.21.0-150000.1.75.1
Container suse/kubectl:latest:helm-3.21.0-150000.1.75.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:helm-3.21.0-150000.1.75.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:helm-bash-completion-3.21.0-150000.1.75.1
Ссылки
- CVE-2026-33814
- SUSE Bug 1264506
- SUSE Bug 1268758
Описание
Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.1, tag deletion via the DELETE /v2/<name>/manifests/<tag> endpoint bypasses the storage.delete.enabled: false configuration, allowing any API client to remove tags from repositories even when the operator has explicitly disabled deletion. This vulnerability is fixed in 3.1.1.
Затронутые продукты
Container suse/kubectl:1.33:helm-3.21.0-150000.1.75.1
Container suse/kubectl:latest:helm-3.21.0-150000.1.75.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:helm-3.21.0-150000.1.75.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:helm-bash-completion-3.21.0-150000.1.75.1
Ссылки
- CVE-2026-41888
- SUSE Bug 1265422