Red Hat Product Errata RHEA-2026:67249 - Product Enhancement Advisory
Issued:
2026-09-14
Updated:
2026-09-14

RHEA-2026:67249 - Product Enhancement Advisory

Synopsis

Advisory for publishing Helm 3.20.2.2 CVE fix release for OCP 4.19

Type/Severity

Product Enhancement Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

CVE fix release of Helm 3.20.2.2 for OpenShift Container Platform 4.19.

Description

This errata advisory is for publishing the CVE fix release of Helm 3.20.2.2 for OpenShift Container Platform 4.19. Built with Go 1.26.7, addressing CVE-2026-33818, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, and CVE-2026-56862. The binary is now built with GOFIPS140=certified so it records FIPS 140 certification (satisfying the OpenShift check-payload scan), in addition to retaining dynamic FIPS compliance via the go.mod godebug directive (fips140=auto).

Solution

Ensuring that the binaries for Helm are available for use to the customers/users. Follow the instructions linked in the References section to download the binaries for Helm and use them.

Affected Products

  • OpenShift Developer Tools and Services 4.19 x86_64
  • OpenShift Developer Tools and Services 4.19 s390x
  • OpenShift Developer Tools and Services 4.19 ppc64le
  • OpenShift Developer Tools and Services 4.19 aarch64

Fixes

  • HELM-837 - Re-release Helm 3.20 for OCP Tools 4.19 with Go 1.26.7

CVEs

(none)

OpenShift Developer Tools and Services 4.19

SRPM
helm-3.20.2.1-77.el9.src.rpm SHA-256: 989878c91fcf13ba0f58164c24f012d156128c09ed94266e74fdffbc7306980a
x86_64
helm-3.20.2.1-77.el9.x86_64.rpm SHA-256: f21817256cd44724da14b8789f9a4fedb8fa77a1567ab51979c8c3b24f143062
helm-redistributable-3.20.2.1-77.el9.x86_64.rpm SHA-256: 9ee806f093d6bc90eae3ee8754b3bf5170a55ce94976a6bf67d34a8f9f35d0dd
s390x
helm-3.20.2.1-77.el9.s390x.rpm SHA-256: cc1e84680984f5d44bd361cc419e7bf7a2567a78ec57e31a94005ce6f029f2b3
ppc64le
helm-3.20.2.1-77.el9.ppc64le.rpm SHA-256: 69b12324a930dd6b2bc42c414b4628ffc879ab8b0b79331245708ce3764e5202
aarch64
helm-3.20.2.1-77.el9.aarch64.rpm SHA-256: f3e65a606cdec70a59f0c8efe7a4329c4226745b89a587c2feb3e7fcd37eb37d

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.