Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 498
Alerts This Week
Warning Icon 1 498

openSUSE Helm Important Fixes for Privilege Escalation Issues 2026-21422-1

opensuse
Calendar Grey July 24, 2026
Scroller Opensuse
This advisory details critical updates for helm addressing important vulnerabilities affecting openSUSE Leap.
openSUSE has released a security update for helm addressing two vulnerabilities, CVE-2026-39821 and CVE-2026-56852, along with bug fixes

Description

This update for helm fixes the following issues

- Update to version 3.21.3

- CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598).

- CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1271997).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1333=1

Topics%20covered

Topics Covered

security advisory privilege escalation important infinite loop OpenSUSE helm

Patch

Package List

- openSUSE Leap 16.0:

helm-3.21.3-160000.1.1

helm-bash-completion-3.21.3-160000.1.1

helm-fish-completion-3.21.3-160000.1.1

helm-zsh-completion-3.21.3-160000.1.1

References

* bsc#1266598

* bsc#1271997

References:

* https://www.suse.com/security/cve/CVE-2026-39821.html

* https://www.suse.com/security/cve/CVE-2026-56852.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:21422-1
Rating: important

Topics%20covered

Topics Covered

security advisory privilege escalation important infinite loop OpenSUSE helm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.