Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Red Hat Helm4 container images could allow unauthorized changes
published 1 month ago
Summary
The Helm4 container images supplied by Red Hat contain outdated components that might let an attacker modify the software inside the container or gain higher privileges. This could affect any system that runs these images, potentially exposing data or services. Update the Helm4 images to the latest versions released by Red Hat to close the gap.
What to do
- Update redhat helm4 to version 0:4.3.0-0.2.hum1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:hummingbird:1 | redhat | helm4 |
< 0:4.3.0-0.2.hum1 Fix: upgrade to 0:4.3.0-0.2.hum1
|
Original advisory text
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
References
- https://access.redhat.com/errata/RHSA-2026:68729 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-81871 Third Party Advisory
- https://access.redhat.com/security/updates/classification/ Third Party Advisory
- https://images.redhat.com/ Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-81872 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-93450 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-63209 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68729.... Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2543236 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-63209 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-63209 Vendor Advisory
- https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c9... Third Party Advisory
- https://github.com/klauspost/compress/releases/tag/v1.18.7 Third Party Advisory
- https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2535725 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-81871 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-81871 Vendor Advisory
- https://github.com/open-telemetry/opentelemetry-go/commit/c65d435b43e5e6b82310e6... Third Party Advisory
- https://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/otlp/o... Third Party Advisory
- https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-w34q... Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2535727 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-81872 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-81872 Vendor Advisory
- https://github.com/open-telemetry/opentelemetry-go/commit/ba71b09e6ed272e93a669a... Third Party Advisory
- https://github.com/open-telemetry/opentelemetry-go/issues/6797 Third Party Advisory
- https://github.com/open-telemetry/opentelemetry-go/pull/8620 Third Party Advisory
- https://github.com/open-telemetry/opentelemetry-go/releases/tag/sdk/log/v0.21.0 Third Party Advisory
- https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hjf4... Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Severity
7.5
High
Timeline
Published22 Sep 2026
Updated2 Oct 2026
First seen23 Sep 2026
Sources
RHSA-2026:68729 · OSV
Track software like this
Free during beta