Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 744
Alerts This Week
Warning Icon 1 744

Fedora 44 Helm 4.2.2 Important Security Issues 2026-5b642da12e

fedora
Calendar Grey July 7, 2026
Dist Fedora Esm H88
Helm update addresses potential security risks including arbitrary code execution and file write vulnerabilities in Fedora 44.
Update to 4.2.2

Summary

Helm is a tool for managing Charts. Charts are packages of pre-configured

Kubernetes resources.

Use Helm to:

- Find and use popular software packaged as Helm Charts to run in Kubernetes

- Share your own applications as Helm Charts

- Create reproducible builds of your Kubernetes applications

- Intelligently manage your Kubernetes manifest files

- Manage releases of Helm packages.

Update Information:

Update to 4.2.2

Topics%20covered

Topics Covered

security advisory denial of service fedora arbitrary code execution arbitrary file write helm

Change Log

* Mon Jun 29 2026 Mikel Olasagasti Uranga - 4.2.2-1 - Update to 4.2.2 - Closes rhbz#2488246 * Thu May 14 2026 Mikel Olasagasti Uranga - 4.2.0-1 - Update to 4.2.0 - Closes rhbz#2446841

References


[ 1 ] Bug #2457445 - CVE-2026-35204 helm: Helm: Arbitrary file write via specially crafted plugin [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2457445 [ 2 ] Bug #2457446 - CVE-2026-35205 helm: Helm: Arbitrary code execution due to insufficient plugin provenance verification [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2457446 [ 3 ] Bug #2486237 - CVE-2026-45287 helm: OpenTelemetry-Go: Denial of Service due to file descriptor leak [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2486237

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-5b642da12e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: helm
Product: Fedora 44
Version: 4.2.2
Release: 1.fc44
URL: https://github.com/helm/helm
Summary: The Kubernetes Package Manager

Topics%20covered

Topics Covered

security advisory denial of service fedora arbitrary code execution arbitrary file write helm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.