Helm

helm/helm last check 175 releases recent
Notes
no notes yet
Release notes
view on github
2.12.2 · Helm Client Security Fix (Moderate) · 1y+

v2.12.2

Helm v2.12.2 is a security release. This release contains a security fix for a vulnerability described here. Users are strongly recommended to update.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • #helm-users for questions and just to hang out
    • #helm-dev for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: GitHub/helm/charts

Features and Changes

This release fixes a security issue. A malicious chart can cause the commands helm fetch --unpack and helm lint to unpack chart content outside of the chart directory on the local filesystem.

Tiller is not impacted.

Installation and Upgrading

Download Helm 2.12.2. The common platform binaries are here:

Once you have the client installed, upgrade Tiller with helm init --upgrade.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • v2.12.3 will contain only bug fixes.
  • v2.13.0 is the next feature release.

Changelog

  • fix: perform extra validation on paths in tar archives (#5165) c194e4a4016902e2ab3f06b29dc8628f27d971a4 (Matt Butcher)