suse-ru-2024:4213-1
Vulnerability from csaf_suse
Published
2024-12-05 16:05
Modified
2024-12-05 16:05
Summary
Recommended update for helm
Notes
Title of the patch
Recommended update for helm
Description of the patch
helm was updated to fix the following issues:
Update to version 3.16.3:
* fix: fix label name
* Fix typo in pkg/lint/rules/chartfile_test.go
* Increasing the size of the runner used for releases.
* fix(hooks): correct hooks delete order
* Bump github.com/containerd/containerd from 1.7.12 to 1.7.23
Update to version 3.16.2:
* Revering change unrelated to issue #13176
* adds tests for handling of Helm index with broken chart
versions #13176
* improves handling of Helm index with broken helm chart versions
#13176
* Bump the k8s-io group with 7 updates
* adding check-latest:true
* Grammar fixes
* Fix typos
Update to version 3.16.1:
* bumping version to 1.22.7
* Merge pull request #13327 from mattfarina/revert-11726
Update to version 3.16.0:
Helm v3.16.0 is a feature release. Users are encouraged to
upgrade for the best experience.
* Notable Changes
- added sha512sum template function
- added ActiveHelp for cmds that don't take any more args
- drops very old Kubernetes versions support in helm create
- add --skip-schema-validation flag to helm 'install',
'upgrade' and 'lint'
- fixed bug to now use burst limit setting for discovery
- Added windows arm64 support
* Full changelog see
https://github.com/helm/helm/releases/tag/v3.16.0
Update to version 3.15.4:
* Bump the k8s-io group across 1 directory with 7 updates
* Bump github.com/docker/docker
-------------------------------------------------------------------
Thu Jul 11 05:39:32 UTC 2024 - opensuse_buildservice@ojkastl.de
- Update to version 3.15.3:
* fix(helm): Use burst limit setting for discovery
* fixed dependency_update_test.go
* fix(dependencyBuild): prevent race condition in concurrent helm
dependency
* fix: respect proxy envvars on helm install/upgrade
* Merge pull request #13085 from
alex-kattathra-johnson/issue-12961
Update to version 3.15.2:
* fix: wrong cli description
* fix typo in load_plugins.go
* fix docs of DeployedAll
* Bump github.com/docker/docker
* bump oras minor version
* feat(load.go): add warning on requirements.lock
Update to version 3.15.1:
* Fixing build issue where wrong version is used
Update to version 3.15.0:
Helm v3.15.0 is a feature release. Users are encouraged to
upgrade for the best experience.
* Updating to k8s 1.30 c4e37b3 (Matt Farina)
* bump version to v3.15.0 d7afa3b (Matt Farina)
* bump version to 7743467 (Matt Farina)
* Fix namespace on kubeconfig error 214fb6e (Calvin Krist)
* Update testdata PKI with keys that have validity until 3393
(Fixes #12880) 1b75d48 (Dirk Mller)
* Modified how created annotation is populated based on package
creation time 0a69a0d (Andrew Block)
* Enabling hide secrets on install and upgrade dry run 25c4738
(Matt Farina)
* Fixing all the linting errors d58d7b3 (Robert Sirchia)
* Add a note about --dry-run displaying secrets a23dd9e (Matt
Farina)
* Updating .gitignore 8b424ba (Robert Sirchia)
* add error messages 8d19bcb (George Jenkins)
* Fix: Ignore alias validation error for index load 68294fd
(George Jenkins)
* validation fix 8e6a514 (Matt Farina)
* bug: add proxy support for oci getter 94c1dea (Ricardo
Maraschini)
* Update architecture detection method 57a1bb8 (weidongkl)
* Improve release action 4790bb9 (George Jenkins)
* Fix grammatical error c25736c (Matt Carr)
* Updated for review comments d2cf8c6 (MichaelMorris)
* Add robustness to wait status checks fc74964 (MichaelMorris)
* refactor: create a helper for checking if a release is
uninstalled f908379 (Alex Petrov)
* fix: reinstall previously uninstalled chart with --keep-history
9e198fa (Alex Petrov)
Update to version 3.14.4:
Helm v3.14.4 is a patch release. Users are encouraged to upgrade
for the best experience. Users are encouraged to upgrade for the
best experience.
* refactor: create a helper for checking if a release is
uninstalled 81c902a (Alex Petrov)
* fix: reinstall previously uninstalled chart with --keep-history
5a11c76 (Alex Petrov)
* bug: add proxy support for oci getter aa7d953 (Ricardo
Maraschini)
Update to version 3.14.3:
* Add a note about --dry-run displaying secrets
* add error messages
* Fix: Ignore alias validation error for index load
* Update architecture detection method
Update to version 3.14.2 (bsc#1220207, CVE-2024-26147):
* Fix for uninitialized variable in yaml parsing
Update to version 3.14.1 (bsc#1219969, CVE-2024-25620):
* validation fix
Update to version 3.14.0:
* Notable Changes
- New helm search flag of --fail-on-no-result
- Allow a nested tpl invocation access to defines
- Speed up the tpl function
- Added qps/HELM_QPS parameter that tells Kubernetes packages
how to operate
- Added --kube-version to lint command
- The ignore pkg is now public
* Changelog
- Improve release action
- Fix issues when verify generation readiness was merged
- fix test to use the default code's k8sVersionMinor
- lint: Add --kube-version flag to set capabilities and
deprecation rules
- Removing Asset Transparency
- tests(pkg/engine): test RenderWithClientProvider
- Make the `ignore` pkg public again
- feature(pkg/engine): introduce RenderWithClientProvider
- Updating Helm libraries for k8s 1.28.4
- Remove excessive logging
- Update CONTRIBUTING.md
- Fixing release labelling in rollback
- feat: move livenessProbe and readinessProbe values to default
values file
- Revert 'fix(main): fix basic auth for helm pull or push'
- Revert 'fix(registry): address anonymous pull issue'
- Update get-helm-3
- Drop filterSystemLabels usage from Query method
- Apply review suggestions
- Update get-helm-3 to get version through get.helm.sh
- feat: print failed hook name
- Fixing precedence issue with the import of values.
- chore(create): indent to spaces
- Allow using label selectors for system labels for sql
backend.
- Allow using label selectors for system labels for secrets and
configmap backends.
- remove useless print during prepareUpgrade
- Add missing with clause to release gh action
- FIX Default ServiceAccount yaml
- fix(registry): address anonymous pull issue
- fix(registry): unswallow error
- Fix missing run statement on release action
- Add qps/HELM_QPS parameter
- Write latest version to get.helm.sh bucket
- Increased release information key name max length.
- Pin gox to specific commit
- Remove `GoFish` from package managers for installing the
binary
- Test update for 'Allow a nested `tpl` invocation access to
`defines` in a containing one'
- Test update for 'Speed up `tpl`'
- Add support for RISC-V
- lint and validate dependency metadata to reference
dependencies with a unique key (name or alias)
- Work around template.Clone omitting options
- fix: pass 'passCredentialsAll' as env-var to getter
- feat: pass basic auth to env-vars when running download
plugins
- helm search: New CLI Flag --fail-on-no-result
- Update pkg/kube/ready.go
- fix post install hook deletion due to before-hook-creation
policy
- Allow a nested `tpl` invocation access to `defines` in a
containing one
- Remove the 'reference templates' concept
- Speed up `tpl`
- ready checker- comment update
- ready checker- remove duplicate statefulset generational
check
- Verify generation in readiness checks
- feat(helm): add --reset-then-reuse-values flag to 'helm
upgrade'
Patchnames
SUSE-2024-4213,SUSE-SLE-Micro-5.5-2024-4213,SUSE-SLE-Module-Containers-15-SP5-2024-4213,SUSE-SLE-Module-Containers-15-SP6-2024-4213,SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-4213,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-4213,openSUSE-Leap-Micro-5.5-2024-4213,openSUSE-SLE-15.5-2024-4213,openSUSE-SLE-15.6-2024-4213
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Recommended update for helm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nhelm was updated to fix the following issues:\n\nUpdate to version 3.16.3:\n\n * fix: fix label name\n * Fix typo in pkg/lint/rules/chartfile_test.go\n * Increasing the size of the runner used for releases.\n * fix(hooks): correct hooks delete order\n * Bump github.com/containerd/containerd from 1.7.12 to 1.7.23\n\nUpdate to version 3.16.2:\n\n * Revering change unrelated to issue #13176\n * adds tests for handling of Helm index with broken chart\n versions #13176\n * improves handling of Helm index with broken helm chart versions\n #13176\n * Bump the k8s-io group with 7 updates\n * adding check-latest:true\n * Grammar fixes\n * Fix typos\n\nUpdate to version 3.16.1:\n\n * bumping version to 1.22.7\n * Merge pull request #13327 from mattfarina/revert-11726\n\nUpdate to version 3.16.0:\n\n Helm v3.16.0 is a feature release. Users are encouraged to\n upgrade for the best experience.\n * Notable Changes\n - added sha512sum template function\n - added ActiveHelp for cmds that don\u0027t take any more args\n - drops very old Kubernetes versions support in helm create\n - add --skip-schema-validation flag to helm \u0027install\u0027,\n \u0027upgrade\u0027 and \u0027lint\u0027\n - fixed bug to now use burst limit setting for discovery\n - Added windows arm64 support\n * Full changelog see\n https://github.com/helm/helm/releases/tag/v3.16.0\n\nUpdate to version 3.15.4:\n\n * Bump the k8s-io group across 1 directory with 7 updates\n * Bump github.com/docker/docker\n\n-------------------------------------------------------------------\nThu Jul 11 05:39:32 UTC 2024 - opensuse_buildservice@ojkastl.de\n\n- Update to version 3.15.3:\n * fix(helm): Use burst limit setting for discovery\n * fixed dependency_update_test.go\n * fix(dependencyBuild): prevent race condition in concurrent helm\n dependency\n * fix: respect proxy envvars on helm install/upgrade\n * Merge pull request #13085 from\n alex-kattathra-johnson/issue-12961\n\nUpdate to version 3.15.2:\n\n * fix: wrong cli description\n * fix typo in load_plugins.go\n * fix docs of DeployedAll\n * Bump github.com/docker/docker\n * bump oras minor version\n * feat(load.go): add warning on requirements.lock\n\nUpdate to version 3.15.1:\n\n * Fixing build issue where wrong version is used\n\nUpdate to version 3.15.0:\n\n Helm v3.15.0 is a feature release. Users are encouraged to\n upgrade for the best experience.\n\n * Updating to k8s 1.30 c4e37b3 (Matt Farina)\n * bump version to v3.15.0 d7afa3b (Matt Farina)\n * bump version to 7743467 (Matt Farina)\n * Fix namespace on kubeconfig error 214fb6e (Calvin Krist)\n * Update testdata PKI with keys that have validity until 3393\n (Fixes #12880) 1b75d48 (Dirk Mller)\n * Modified how created annotation is populated based on package\n creation time 0a69a0d (Andrew Block)\n * Enabling hide secrets on install and upgrade dry run 25c4738\n (Matt Farina)\n * Fixing all the linting errors d58d7b3 (Robert Sirchia)\n * Add a note about --dry-run displaying secrets a23dd9e (Matt\n Farina)\n * Updating .gitignore 8b424ba (Robert Sirchia)\n * add error messages 8d19bcb (George Jenkins)\n * Fix: Ignore alias validation error for index load 68294fd\n (George Jenkins)\n * validation fix 8e6a514 (Matt Farina)\n * bug: add proxy support for oci getter 94c1dea (Ricardo\n Maraschini)\n * Update architecture detection method 57a1bb8 (weidongkl)\n * Improve release action 4790bb9 (George Jenkins)\n * Fix grammatical error c25736c (Matt Carr)\n * Updated for review comments d2cf8c6 (MichaelMorris)\n * Add robustness to wait status checks fc74964 (MichaelMorris)\n * refactor: create a helper for checking if a release is\n uninstalled f908379 (Alex Petrov)\n * fix: reinstall previously uninstalled chart with --keep-history\n 9e198fa (Alex Petrov)\n\nUpdate to version 3.14.4:\n\n Helm v3.14.4 is a patch release. Users are encouraged to upgrade\n for the best experience. Users are encouraged to upgrade for the\n best experience.\n\n * refactor: create a helper for checking if a release is\n uninstalled 81c902a (Alex Petrov)\n * fix: reinstall previously uninstalled chart with --keep-history\n 5a11c76 (Alex Petrov)\n * bug: add proxy support for oci getter aa7d953 (Ricardo\n Maraschini)\n\nUpdate to version 3.14.3:\n\n * Add a note about --dry-run displaying secrets\n * add error messages\n * Fix: Ignore alias validation error for index load\n * Update architecture detection method\n\nUpdate to version 3.14.2 (bsc#1220207, CVE-2024-26147):\n\n * Fix for uninitialized variable in yaml parsing\n \nUpdate to version 3.14.1 (bsc#1219969, CVE-2024-25620):\n\n * validation fix\n\nUpdate to version 3.14.0:\n\n * Notable Changes\n - New helm search flag of --fail-on-no-result\n - Allow a nested tpl invocation access to defines\n - Speed up the tpl function\n - Added qps/HELM_QPS parameter that tells Kubernetes packages\n how to operate\n - Added --kube-version to lint command\n - The ignore pkg is now public\n * Changelog\n - Improve release action\n - Fix issues when verify generation readiness was merged\n - fix test to use the default code\u0027s k8sVersionMinor\n - lint: Add --kube-version flag to set capabilities and\n deprecation rules\n - Removing Asset Transparency\n - tests(pkg/engine): test RenderWithClientProvider\n - Make the `ignore` pkg public again\n - feature(pkg/engine): introduce RenderWithClientProvider\n - Updating Helm libraries for k8s 1.28.4\n - Remove excessive logging\n - Update CONTRIBUTING.md\n - Fixing release labelling in rollback\n - feat: move livenessProbe and readinessProbe values to default\n values file\n - Revert \u0027fix(main): fix basic auth for helm pull or push\u0027\n - Revert \u0027fix(registry): address anonymous pull issue\u0027\n - Update get-helm-3\n - Drop filterSystemLabels usage from Query method\n - Apply review suggestions\n - Update get-helm-3 to get version through get.helm.sh\n - feat: print failed hook name\n - Fixing precedence issue with the import of values.\n - chore(create): indent to spaces\n - Allow using label selectors for system labels for sql\n backend.\n - Allow using label selectors for system labels for secrets and\n configmap backends.\n - remove useless print during prepareUpgrade\n - Add missing with clause to release gh action\n - FIX Default ServiceAccount yaml\n - fix(registry): address anonymous pull issue\n - fix(registry): unswallow error\n - Fix missing run statement on release action\n - Add qps/HELM_QPS parameter\n - Write latest version to get.helm.sh bucket\n - Increased release information key name max length.\n - Pin gox to specific commit\n - Remove `GoFish` from package managers for installing the\n binary\n - Test update for \u0027Allow a nested `tpl` invocation access to\n `defines` in a containing one\u0027\n - Test update for \u0027Speed up `tpl`\u0027\n - Add support for RISC-V\n - lint and validate dependency metadata to reference\n dependencies with a unique key (name or alias)\n - Work around template.Clone omitting options\n - fix: pass \u0027passCredentialsAll\u0027 as env-var to getter\n - feat: pass basic auth to env-vars when running download\n plugins\n - helm search: New CLI Flag --fail-on-no-result\n - Update pkg/kube/ready.go\n - fix post install hook deletion due to before-hook-creation\n policy\n - Allow a nested `tpl` invocation access to `defines` in a\n containing one\n - Remove the \u0027reference templates\u0027 concept\n - Speed up `tpl`\n - ready checker- comment update\n - ready checker- remove duplicate statefulset generational\n check\n - Verify generation in readiness checks\n - feat(helm): add --reset-then-reuse-values flag to \u0027helm\n upgrade\u0027\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-4213,SUSE-SLE-Micro-5.5-2024-4213,SUSE-SLE-Module-Containers-15-SP5-2024-4213,SUSE-SLE-Module-Containers-15-SP6-2024-4213,SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-4213,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-4213,openSUSE-Leap-Micro-5.5-2024-4213,openSUSE-SLE-15.5-2024-4213,openSUSE-SLE-15.6-2024-4213",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-ru-2024_4213-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-RU-2024:4213-1",
"url": "https://www.suse.com/support/update/announcement//suse-ru-20244213-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-RU-2024:4213-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2024-December/037756.html"
},
{
"category": "self",
"summary": "SUSE Bug 1219969",
"url": "https://bugzilla.suse.com/1219969"
},
{
"category": "self",
"summary": "SUSE Bug 1220207",
"url": "https://bugzilla.suse.com/1220207"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-25620 page",
"url": "https://www.suse.com/security/cve/CVE-2024-25620/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26147 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26147/"
}
],
"title": "Recommended update for helm",
"tracking": {
"current_release_date": "2024-12-05T16:05:58Z",
"generator": {
"date": "2024-12-05T16:05:58Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-RU-2024:4213-1",
"initial_release_date": "2024-12-05T16:05:58Z",
"revision_history": [
{
"date": "2024-12-05T16:05:58Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "helm-3.16.3-150000.1.38.1.aarch64",
"product": {
"name": "helm-3.16.3-150000.1.38.1.aarch64",
"product_id": "helm-3.16.3-150000.1.38.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"product": {
"name": "helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"product_id": "helm-bash-completion-3.16.3-150000.1.38.1.noarch"
}
},
{
"category": "product_version",
"name": "helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"product": {
"name": "helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"product_id": "helm-fish-completion-3.16.3-150000.1.38.1.noarch"
}
},
{
"category": "product_version",
"name": "helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"product": {
"name": "helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"product_id": "helm-zsh-completion-3.16.3-150000.1.38.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "helm-3.16.3-150000.1.38.1.ppc64le",
"product": {
"name": "helm-3.16.3-150000.1.38.1.ppc64le",
"product_id": "helm-3.16.3-150000.1.38.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "helm-3.16.3-150000.1.38.1.s390x",
"product": {
"name": "helm-3.16.3-150000.1.38.1.s390x",
"product_id": "helm-3.16.3-150000.1.38.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "helm-3.16.3-150000.1.38.1.x86_64",
"product": {
"name": "helm-3.16.3-150000.1.38.1.x86_64",
"product_id": "helm-3.16.3-150000.1.38.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.5",
"product": {
"name": "SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Containers 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Module for Containers 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Containers 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-containers:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Containers 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Module for Containers 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Containers 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-containers:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:packagehub:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:packagehub:15:sp6"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap Micro 5.5",
"product": {
"name": "openSUSE Leap Micro 5.5",
"product_id": "openSUSE Leap Micro 5.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap-micro:5.5"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.6",
"product": {
"name": "openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.aarch64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.aarch64"
},
"product_reference": "helm-3.16.3-150000.1.38.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.ppc64le as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.ppc64le"
},
"product_reference": "helm-3.16.3-150000.1.38.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.s390x as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.s390x"
},
"product_reference": "helm-3.16.3-150000.1.38.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.x86_64"
},
"product_reference": "helm-3.16.3-150000.1.38.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-bash-completion-3.16.3-150000.1.38.1.noarch as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch"
},
"product_reference": "helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.aarch64 as component of SUSE Linux Enterprise Module for Containers 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.aarch64"
},
"product_reference": "helm-3.16.3-150000.1.38.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.ppc64le as component of SUSE Linux Enterprise Module for Containers 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.ppc64le"
},
"product_reference": "helm-3.16.3-150000.1.38.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.s390x as component of SUSE Linux Enterprise Module for Containers 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.s390x"
},
"product_reference": "helm-3.16.3-150000.1.38.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.x86_64 as component of SUSE Linux Enterprise Module for Containers 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.x86_64"
},
"product_reference": "helm-3.16.3-150000.1.38.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-bash-completion-3.16.3-150000.1.38.1.noarch as component of SUSE Linux Enterprise Module for Containers 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Containers 15 SP5:helm-bash-completion-3.16.3-150000.1.38.1.noarch"
},
"product_reference": "helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-zsh-completion-3.16.3-150000.1.38.1.noarch as component of SUSE Linux Enterprise Module for Containers 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Containers 15 SP5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch"
},
"product_reference": "helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.aarch64 as component of SUSE Linux Enterprise Module for Containers 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.aarch64"
},
"product_reference": "helm-3.16.3-150000.1.38.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.ppc64le as component of SUSE Linux Enterprise Module for Containers 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.ppc64le"
},
"product_reference": "helm-3.16.3-150000.1.38.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.s390x as component of SUSE Linux Enterprise Module for Containers 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.s390x"
},
"product_reference": "helm-3.16.3-150000.1.38.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.x86_64 as component of SUSE Linux Enterprise Module for Containers 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.x86_64"
},
"product_reference": "helm-3.16.3-150000.1.38.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-bash-completion-3.16.3-150000.1.38.1.noarch as component of SUSE Linux Enterprise Module for Containers 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Containers 15 SP6:helm-bash-completion-3.16.3-150000.1.38.1.noarch"
},
"product_reference": "helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-zsh-completion-3.16.3-150000.1.38.1.noarch as component of SUSE Linux Enterprise Module for Containers 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Containers 15 SP6:helm-zsh-completion-3.16.3-150000.1.38.1.noarch"
},
"product_reference": "helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Containers 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-fish-completion-3.16.3-150000.1.38.1.noarch as component of SUSE Linux Enterprise Module for Package Hub 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP5:helm-fish-completion-3.16.3-150000.1.38.1.noarch"
},
"product_reference": "helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-fish-completion-3.16.3-150000.1.38.1.noarch as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP6:helm-fish-completion-3.16.3-150000.1.38.1.noarch"
},
"product_reference": "helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.aarch64 as component of openSUSE Leap Micro 5.5",
"product_id": "openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.aarch64"
},
"product_reference": "helm-3.16.3-150000.1.38.1.aarch64",
"relates_to_product_reference": "openSUSE Leap Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.ppc64le as component of openSUSE Leap Micro 5.5",
"product_id": "openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.ppc64le"
},
"product_reference": "helm-3.16.3-150000.1.38.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.s390x as component of openSUSE Leap Micro 5.5",
"product_id": "openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.s390x"
},
"product_reference": "helm-3.16.3-150000.1.38.1.s390x",
"relates_to_product_reference": "openSUSE Leap Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.x86_64 as component of openSUSE Leap Micro 5.5",
"product_id": "openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.x86_64"
},
"product_reference": "helm-3.16.3-150000.1.38.1.x86_64",
"relates_to_product_reference": "openSUSE Leap Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-bash-completion-3.16.3-150000.1.38.1.noarch as component of openSUSE Leap Micro 5.5",
"product_id": "openSUSE Leap Micro 5.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch"
},
"product_reference": "helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"relates_to_product_reference": "openSUSE Leap Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-fish-completion-3.16.3-150000.1.38.1.noarch as component of openSUSE Leap Micro 5.5",
"product_id": "openSUSE Leap Micro 5.5:helm-fish-completion-3.16.3-150000.1.38.1.noarch"
},
"product_reference": "helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"relates_to_product_reference": "openSUSE Leap Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-zsh-completion-3.16.3-150000.1.38.1.noarch as component of openSUSE Leap Micro 5.5",
"product_id": "openSUSE Leap Micro 5.5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch"
},
"product_reference": "helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"relates_to_product_reference": "openSUSE Leap Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.aarch64"
},
"product_reference": "helm-3.16.3-150000.1.38.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.ppc64le"
},
"product_reference": "helm-3.16.3-150000.1.38.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.s390x"
},
"product_reference": "helm-3.16.3-150000.1.38.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.x86_64"
},
"product_reference": "helm-3.16.3-150000.1.38.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-bash-completion-3.16.3-150000.1.38.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch"
},
"product_reference": "helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-fish-completion-3.16.3-150000.1.38.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:helm-fish-completion-3.16.3-150000.1.38.1.noarch"
},
"product_reference": "helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-zsh-completion-3.16.3-150000.1.38.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch"
},
"product_reference": "helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.aarch64"
},
"product_reference": "helm-3.16.3-150000.1.38.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.ppc64le"
},
"product_reference": "helm-3.16.3-150000.1.38.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.s390x"
},
"product_reference": "helm-3.16.3-150000.1.38.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-3.16.3-150000.1.38.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.x86_64"
},
"product_reference": "helm-3.16.3-150000.1.38.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-bash-completion-3.16.3-150000.1.38.1.noarch as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:helm-bash-completion-3.16.3-150000.1.38.1.noarch"
},
"product_reference": "helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-fish-completion-3.16.3-150000.1.38.1.noarch as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:helm-fish-completion-3.16.3-150000.1.38.1.noarch"
},
"product_reference": "helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "helm-zsh-completion-3.16.3-150000.1.38.1.noarch as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:helm-zsh-completion-3.16.3-150000.1.38.1.noarch"
},
"product_reference": "helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25620",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-25620"
}
],
"notes": [
{
"category": "general",
"text": "Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used to save a chart whose name within the `Chart.yaml` file includes a relative path change, the chart would be saved outside its expected directory based on the changes in the relative path. The validation and linting did not detect the path changes in the name. This issue has been resolved in Helm v3.14.1. Users unable to upgrade should check all charts used by Helm for path changes in their name as found in the `Chart.yaml` file. This includes dependencies.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.s390x",
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.aarch64",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.ppc64le",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.s390x",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.x86_64",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.aarch64",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.ppc64le",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.s390x",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.x86_64",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP5:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.aarch64",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.ppc64le",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.s390x",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.x86_64",
"openSUSE Leap 15.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.5:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.aarch64",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.ppc64le",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.s390x",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.x86_64",
"openSUSE Leap 15.6:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.6:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.6:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.aarch64",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.ppc64le",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.s390x",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.x86_64",
"openSUSE Leap Micro 5.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap Micro 5.5:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap Micro 5.5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-25620",
"url": "https://www.suse.com/security/cve/CVE-2024-25620"
},
{
"category": "external",
"summary": "SUSE Bug 1219969 for CVE-2024-25620",
"url": "https://bugzilla.suse.com/1219969"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.s390x",
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.aarch64",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.ppc64le",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.s390x",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.x86_64",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.aarch64",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.ppc64le",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.s390x",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.x86_64",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP5:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.aarch64",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.ppc64le",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.s390x",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.x86_64",
"openSUSE Leap 15.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.5:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.aarch64",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.ppc64le",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.s390x",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.x86_64",
"openSUSE Leap 15.6:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.6:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.6:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.aarch64",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.ppc64le",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.s390x",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.x86_64",
"openSUSE Leap Micro 5.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap Micro 5.5:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap Micro 5.5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.s390x",
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.aarch64",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.ppc64le",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.s390x",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.x86_64",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.aarch64",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.ppc64le",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.s390x",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.x86_64",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP5:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.aarch64",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.ppc64le",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.s390x",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.x86_64",
"openSUSE Leap 15.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.5:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.aarch64",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.ppc64le",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.s390x",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.x86_64",
"openSUSE Leap 15.6:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.6:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.6:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.aarch64",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.ppc64le",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.s390x",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.x86_64",
"openSUSE Leap Micro 5.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap Micro 5.5:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap Micro 5.5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-12-05T16:05:58Z",
"details": "moderate"
}
],
"title": "CVE-2024-25620"
},
{
"cve": "CVE-2024-26147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26147"
}
],
"notes": [
{
"category": "general",
"text": "Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an uninitialized variable vulnerability when Helm parses index and plugin yaml files missing expected content. When either an `index.yaml` file or a plugins `plugin.yaml` file were missing all metadata a panic would occur in Helm. In the Helm SDK, this is found when using the `LoadIndexFile` or `DownloadIndexFile` functions in the `repo` package or the `LoadDir` function in the `plugin` package. For the Helm client this impacts functions around adding a repository and all Helm functions if a malicious plugin is added as Helm inspects all known plugins on each invocation. This issue has been resolved in Helm v3.14.2. If a malicious plugin has been added which is causing all Helm client commands to panic, the malicious plugin can be manually removed from the filesystem. If using Helm SDK versions prior to 3.14.2, calls to affected functions can use `recover` to catch the panic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.s390x",
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.aarch64",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.ppc64le",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.s390x",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.x86_64",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.aarch64",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.ppc64le",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.s390x",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.x86_64",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP5:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.aarch64",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.ppc64le",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.s390x",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.x86_64",
"openSUSE Leap 15.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.5:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.aarch64",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.ppc64le",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.s390x",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.x86_64",
"openSUSE Leap 15.6:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.6:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.6:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.aarch64",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.ppc64le",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.s390x",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.x86_64",
"openSUSE Leap Micro 5.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap Micro 5.5:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap Micro 5.5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26147",
"url": "https://www.suse.com/security/cve/CVE-2024-26147"
},
{
"category": "external",
"summary": "SUSE Bug 1220207 for CVE-2024-26147",
"url": "https://bugzilla.suse.com/1220207"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.s390x",
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.aarch64",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.ppc64le",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.s390x",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.x86_64",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.aarch64",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.ppc64le",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.s390x",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.x86_64",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP5:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.aarch64",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.ppc64le",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.s390x",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.x86_64",
"openSUSE Leap 15.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.5:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.aarch64",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.ppc64le",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.s390x",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.x86_64",
"openSUSE Leap 15.6:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.6:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.6:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.aarch64",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.ppc64le",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.s390x",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.x86_64",
"openSUSE Leap Micro 5.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap Micro 5.5:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap Micro 5.5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.s390x",
"SUSE Linux Enterprise Micro 5.5:helm-3.16.3-150000.1.38.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.aarch64",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.ppc64le",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.s390x",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-3.16.3-150000.1.38.1.x86_64",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.aarch64",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.ppc64le",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.s390x",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-3.16.3-150000.1.38.1.x86_64",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Containers 15 SP6:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP5:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"SUSE Linux Enterprise Module for Package Hub 15 SP6:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.aarch64",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.ppc64le",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.s390x",
"openSUSE Leap 15.5:helm-3.16.3-150000.1.38.1.x86_64",
"openSUSE Leap 15.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.5:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.aarch64",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.ppc64le",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.s390x",
"openSUSE Leap 15.6:helm-3.16.3-150000.1.38.1.x86_64",
"openSUSE Leap 15.6:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.6:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap 15.6:helm-zsh-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.aarch64",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.ppc64le",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.s390x",
"openSUSE Leap Micro 5.5:helm-3.16.3-150000.1.38.1.x86_64",
"openSUSE Leap Micro 5.5:helm-bash-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap Micro 5.5:helm-fish-completion-3.16.3-150000.1.38.1.noarch",
"openSUSE Leap Micro 5.5:helm-zsh-completion-3.16.3-150000.1.38.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-12-05T16:05:58Z",
"details": "moderate"
}
],
"title": "CVE-2024-26147"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…