SUSE-SU-2026:2049-1

Details

Description of the patch:

This update for helm fixes the following issues

Security issues:

CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758).
CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the storage.delete.enabled configuration (bsc#1265428).

Non security issue:

Fix packages for %suse_version bump (jsc#PED-15794).
Update to version 3.21.0

Affected Packages

helm

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Micro 5.5

Fixed in:

3.21.0-150000.1.75.1

helm-bash-completion

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Micro 5.5

Fixed in:

3.21.0-150000.1.75.1

helm-zsh-completion

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Module for Containers 15 SP7

Fixed in:

3.21.0-150000.1.75.1

helm-fish-completion

SUSE Linux Enterprise Module for Package Hub 15 SP7

Fixed in:

3.21.0-150000.1.75.1

References

ADVISORY

https://bugzilla.suse.com/1265428

ADVISORY

https://bugzilla.suse.com/1265758

ADVISORY