Security update for helm
This update for helm fixes the following issues Security issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). - CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the storage.delete.enabled configuration (bsc#1265428). Non security issue: - Update to version 3.21.0. - Fix packages for %suse_version bump (jsc#PED-15794)
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for helm fixes the following issues Security issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). - CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the storage.delete.enabled configuration (bsc#1265428). Non security issue: - Update to version 3.21.0. - Fix packages for %suse_version bump (jsc#PED-15794)
05 / REFERENCES