SUSE-SU-2025:4190-1

Details

Description of the patch:

This update for helm fixes the following issues:

Update to version 3.19.1
CVE-2025-53547: Fixed local code execution in Helm Chart. (bsc#1246152)
CVE-2025-58190: Fixed excessive memory consumption by html.ParseFragment when processing specially crafted input. (bsc#1251649)
CVE-2025-47911: Fixed various algorithms with quadratic complexity when parsing HTML documents. (bsc#1251442)

Affected Packages

helm

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

Fixed in:

3.19.1-150000.1.57.1

helm-bash-completion

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

Fixed in:

3.19.1-150000.1.57.1

helm-zsh-completion

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

Fixed in:

3.19.1-150000.1.57.1

helm-fish-completion

SUSE Linux Enterprise Module for Package Hub 15 SP6SUSE Linux Enterprise Module for Package Hub 15 SP7openSUSE Leap 15.6

Fixed in:

3.19.1-150000.1.57.1

References

ADVISORY

https://bugzilla.suse.com/1246152

ADVISORY

https://bugzilla.suse.com/1251442

ADVISORY