Helm

helm/helm last check 175 releases recent
Notes
no notes yet
Release notes
view on github
2.16.3 · Helm v2.16.3 · 1y+

Helm v2.16.3 is a security patch release.

A community member's vulnerability scanners identified CVE-2019-1551, a CVE that affects certain versions of openssl.

The CVE does not affect Helm or Tiller directly. Go has its own implementation of the TLS handshake protocol as part of their crypto/tls package, and Helm/Tiller only supports x.509-encoded keys and certificates, which are not affected.

However, anyone using gcr.io/kubernetes-helm/tiller:v2.16.1 as a base image with DH512-encoded keys and certificates in their application are encouraged to upgrade.

This release was signed with 92AA 783C BAAE 8E3B and can be found at @bacongobbler's keybase account. Please use the attached signatures for verifying this release using gpg.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • #helm-users for questions and just to hang out
    • #helm-dev for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: GitHub/helm/charts

Installation and Upgrading

Download Helm 2.16.3. The common platform binaries are here:

Once you have the client installed, upgrade Tiller with helm init --upgrade.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • v2.16.4 will contain only bug fixes.

Changelog

  • chore(rootfs): bump alpine image to 3.11 1ee0254c86d4ed6887327dabed7aa7da29d7eb0d (Matthew Fisher)