Security update for helm
This update for helm to version 2.13.1 fixes the following issues: - set correct git_commit value so that 'helm version' reports correctly - added service file for helm-serve - Require golang 1.10.6 or newer - Tiller should only enforce what we expect from Helm - Keepalive config should be independent of TLS - Bump client side grpc max msg size - Update deprecated grpc dial timeout - Includes fixes which allow Helm to correctly recognize resources created using the K8S 1.8/1.9 API namespaces
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for helm to version 2.13.1 fixes the following issues: - set correct git_commit value so that 'helm version' reports correctly - added service file for helm-serve - Require golang 1.10.6 or newer - Tiller should only enforce what we expect from Helm - Keepalive config should be independent of TLS - Bump client side grpc max msg size - Update deprecated grpc dial timeout - Includes fixes which allow Helm to correctly recognize resources created using the K8S 1.8/1.9 API namespaces
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1118897
- https://bugzilla.suse.com/1118898
- https://bugzilla.suse.com/1118899
- https://lists.opensuse.org/archives/list/[email protected]/thread/JECNV3BMXBNMPC6CIX5BMOAPGIHSNLAI/#JECNV3BMXBNMPC6CIX5BMOAPGIHSNLAI
- https://www.suse.com/security/cve/CVE-2018-16873
- https://www.suse.com/security/cve/CVE-2018-16874
- https://www.suse.com/security/cve/CVE-2018-16875