Helm

Helm v2.16.9 is a companion release to Helm 3.2.4, which had a vulnerability in the handling of plugins. Helm 2 does not have a known security vulnerability. However, we determined that Helm 2 should fail with an error message instead of fixing malformed paths when it detected them. We believe this proactive step will decrease the likelihood of a future vulnerability.

Users are urged to upgrade. More information on the security disclosure is available here.

The community keeps growing, and we'd love to see you there!

• Join the discussion in Kubernetes Slack:
  • #helm-users for questions and just to hang out
  • #helm-dev for discussing PRs, code, and bugs
• Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
• Test, debug, and contribute charts: GitHub/helm/charts

Installation and Upgrading

Download Helm 2.16.9. The common platform binaries are here:

• MacOS amd64 (checksum)
• Linux amd64 (checksum)
• Linux arm (checksum)
• Linux arm64 (checksum)
• Linux i386 (checksum)
• Linux ppc64le (checksum)
• Linux s390x (checksum)
• Windows amd64 (checksum)

This release was signed with 6EA5 D759 8529 A53E and can be found at @hickeyma keybase account. Please use the attached signatures for verifying this release using gpg.

Once you have the client installed, upgrade Tiller with helm init --upgrade.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

• v2.16.10 will contain only bug fixes.

Changelog

• backported archive improvements from v3 (#8318) 8ad7037828e5a0fca1009dabe290130da6368e39 (Matt Butcher)