Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.9
Helm 3 hardened images may contain outdated packages
published 21 days ago
Summary
Red Hat has released an update for the hardened container images used with Helm 3 that corrects package problems and adds security enhancements. Running the older images could leave your Kubernetes deployments with components that are not fully patched. Apply the latest image versions from Red Hat to keep your Helm‑based workloads protected.
What to do
- Update redhat helm3 to version 0:3.22.0-0.3.hum1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:hummingbird:1 | redhat | helm3 |
< 0:3.22.0-0.3.hum1 Fix: upgrade to 0:3.22.0-0.3.hum1
|
Original advisory text
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
References
- https://access.redhat.com/errata/RHSA-2026:80656 Vendor Advisory
- https://images.redhat.com/ Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-24786 Third Party Advisory
- https://access.redhat.com/security/updates/classification/ Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_80656.... Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268046 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-24786 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-24786 Vendor Advisory
- https://go.dev/cl/569356 Third Party Advisory
- https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/ Third Party Advisory
- https://pkg.go.dev/vuln/GO-2024-2611 Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published14 Oct 2026
Updated14 Oct 2026
First seen14 Oct 2026
Sources
RHSA-2026:80656 · OSV
Track software like this
Free during beta