exploitDog

SUSE-SU-2026:3342-1

Опубликовано: 28 июл. 2026

Источник: suse-cvrf

Описание

Security update for helm

This update for helm fixes the following issues:

Update to version 3.21.3.

CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598).
CVE-2026-56852: golang.org/x/text/unicode/norm: handling input containing truncated or invalid UTF-8 bytes can lead to an infinite loop (bsc#1271997).

Other updates and bugfixes:

Update x/text to 0.40.0.
Update x/net to 0.57.0.
Version 3.21.3:
- Apply suggestions from code review 1ad6e68 (Benoit Tigeot).
- fix: drop containerd v1 dep to resolve govulncheck CVEs 037733e (Benoit Tigeot).
- chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 d3e178b.

Список пакетов

Container suse/kubectl:1.33

helm-3.21.3-150000.1.85.1

Container suse/kubectl:latest

helm-3.21.3-150000.1.85.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

helm-3.21.3-150000.1.85.1

helm-bash-completion-3.21.3-150000.1.85.1

helm-zsh-completion-3.21.3-150000.1.85.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

helm-3.21.3-150000.1.85.1

helm-bash-completion-3.21.3-150000.1.85.1

helm-zsh-completion-3.21.3-150000.1.85.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

helm-3.21.3-150000.1.85.1

helm-bash-completion-3.21.3-150000.1.85.1

helm-zsh-completion-3.21.3-150000.1.85.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

helm-3.21.3-150000.1.85.1

helm-bash-completion-3.21.3-150000.1.85.1

helm-zsh-completion-3.21.3-150000.1.85.1

SUSE Linux Enterprise Micro 5.5

helm-3.21.3-150000.1.85.1

helm-bash-completion-3.21.3-150000.1.85.1

SUSE Linux Enterprise Module for Containers 15 SP7

helm-3.21.3-150000.1.85.1

helm-bash-completion-3.21.3-150000.1.85.1

helm-zsh-completion-3.21.3-150000.1.85.1

SUSE Linux Enterprise Module for Package Hub 15 SP7

helm-fish-completion-3.21.3-150000.1.85.1

SUSE Linux Enterprise Server 15 SP4-LTSS

helm-3.21.3-150000.1.85.1

helm-bash-completion-3.21.3-150000.1.85.1

helm-zsh-completion-3.21.3-150000.1.85.1

SUSE Linux Enterprise Server 15 SP5-LTSS

helm-3.21.3-150000.1.85.1

helm-bash-completion-3.21.3-150000.1.85.1

helm-zsh-completion-3.21.3-150000.1.85.1

SUSE Linux Enterprise Server 15 SP6-LTSS

helm-3.21.3-150000.1.85.1

helm-bash-completion-3.21.3-150000.1.85.1

helm-zsh-completion-3.21.3-150000.1.85.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

helm-3.21.3-150000.1.85.1

helm-bash-completion-3.21.3-150000.1.85.1

helm-zsh-completion-3.21.3-150000.1.85.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

helm-3.21.3-150000.1.85.1

helm-bash-completion-3.21.3-150000.1.85.1

helm-zsh-completion-3.21.3-150000.1.85.1

SUSE Linux Enterprise Server for SAP Applications 15 SP6

helm-3.21.3-150000.1.85.1

helm-bash-completion-3.21.3-150000.1.85.1

helm-zsh-completion-3.21.3-150000.1.85.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20263342-1/
Link for SUSE-SU-2026:3342-1
https://lists.suse.com/pipermail/sle-updates/2026-July/048884.html
E-Mail link for SUSE-SU-2026:3342-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1266598
SUSE Bug 1266598
https://bugzilla.suse.com/1271997
SUSE Bug 1271997
https://www.suse.com/security/cve/CVE-2026-39821/
SUSE CVE CVE-2026-39821 page
https://www.suse.com/security/cve/CVE-2026-56852/
SUSE CVE CVE-2026-56852 page

Описание

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".

Затронутые продукты

Container suse/kubectl:1.33:helm-3.21.3-150000.1.85.1

Container suse/kubectl:latest:helm-3.21.3-150000.1.85.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:helm-3.21.3-150000.1.85.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:helm-bash-completion-3.21.3-150000.1.85.1

Ссылки

Описание

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

Затронутые продукты

Container suse/kubectl:1.33:helm-3.21.3-150000.1.85.1

Container suse/kubectl:latest:helm-3.21.3-150000.1.85.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:helm-3.21.3-150000.1.85.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:helm-bash-completion-3.21.3-150000.1.85.1

Ссылки

Уязвимость SUSE-SU-2026:3342-1