Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 539
Alerts This Week
Warning Icon 1 539

SUSE 2026-22855-1 Helm Important Privilege Escalation Infinite Loop

suse
Calendar Grey July 27, 2026
Scroller Suse
Important update for SUSE to address helm vulnerabilities, emphasizing privilege escalation and infinite loop issues swiftly.
A security update for helm addresses two vulnerabilities in SUSE Linux Enterprise Server and includes version 3.21.3, improving security against privilege escalation and infinite l...

Summary

## This update for helm fixes the following issues * Update to version 3.21.3 * CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598). * CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1271997). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1333=1 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1333=1 ## Package List:

Topics%20covered

Topics Covered

security advisory SuSE privilege escalation important infinite loop helm

References

* bsc#1266598

* bsc#1271997

Cross-

* CVE-2026-39821

* CVE-2026-56852

CVSS scores:

* CVE-2026-39821 ( SUSE ): 9.1

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

* CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

* CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

* CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

* CVE-2026-56852 ( SUSE ): 6.0

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products:

* SUSE Linux Enterprise Server 16.0

* SUSE Linux Enterprise Server for SAP applications 16.0

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:22855-1
Release Date: 2026-07-22T16:35:45Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE privilege escalation important infinite loop helm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.