gpp_maybe Security update for helm

SUSE-SLE-Module-Containers-15-SP7-2026-2823

This update for helm fixes the following issues - Update to version 3.21.2. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598). - CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens (bsc#1270127).

• Release Date
  Jul 9 2026
• References
  Bugzilla: 1266598, 1270127
  CVEs: CVE-2026-39821, CVE-2026-48978
• Type
  security
• Severity
  important

cloud_download Downloads

Containers Module 15.7 s390x

• Packages
  helm
  The Kubernetes Package Manager

  3.21.2-150000.1.80.1 lock rpm lock src

  helm-bash-completion
  Bash Completion for helm

  3.21.2-150000.1.80.1 lock rpm

  helm-zsh-completion
  Zsh Completion for helm

  3.21.2-150000.1.80.1 lock rpm

Containers Module 15.7 ppc64le

• Packages
  helm
  The Kubernetes Package Manager

  3.21.2-150000.1.80.1 lock rpm lock src

  helm-bash-completion
  Bash Completion for helm

  3.21.2-150000.1.80.1 lock rpm

  helm-zsh-completion
  Zsh Completion for helm

  3.21.2-150000.1.80.1 lock rpm

Containers Module 15.7 aarch64

• Packages
  helm
  The Kubernetes Package Manager

  3.21.2-150000.1.80.1 lock rpm lock src

  helm-bash-completion
  Bash Completion for helm

  3.21.2-150000.1.80.1 lock rpm

  helm-zsh-completion
  Zsh Completion for helm

  3.21.2-150000.1.80.1 lock rpm

Containers Module 15.7 x86_64

• Packages
  helm
  The Kubernetes Package Manager

  3.21.2-150000.1.80.1 lock rpm lock src

  helm-bash-completion
  Bash Completion for helm

  3.21.2-150000.1.80.1 lock rpm

  helm-zsh-completion
  Zsh Completion for helm

  3.21.2-150000.1.80.1 lock rpm