Helm v2.16.8

Helm v2.16.8 is a security release, patching a high-severity security vulnerability found in Go's `crypto` package affecting all versions of Helm 2 prior to 2.16.8. On 32-bit architectures, Go before 1.12.16 and 1.13.x before 1.13.7 (and the `crypto/cryptobyte` package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients resulting in a panic via a malformed X.509 certificate. This may allow a remote attacker to cause a denial of service. Users are urged to upgrade. More information on the security disclosure is available [here](https://github.com/helm/helm/security/advisories?state=published). Thanks to @ravin9249 for identifying the vulnerability. The community keeps growing, and we'd love to see you there! - Join the discussion in [Kubernetes Slack](https://kubernetes.slack.com): - `#helm-users` for questions and just to hang out - `#helm-dev` for discussing PRs, code, and bugs - Hang out at the Public Developer Call: Thursday, 9:30 Pacific via [Zoom](https://zoom.us/j/696660622) - Test, debug, and contribute charts: [GitHub/helm/charts](https://github.com/helm/charts) ## Installation and Upgrading Download Helm 2.16. The common platform binaries are here: - [MacOS amd64](https://get.helm.sh/helm-v2.16.8-darwin-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v2.16.8-darwin-amd64.tar.gz.sha256)) - [Linux amd64](https://get.helm.sh/helm-v2.16.8-linux-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v2.16.8-linux-amd64.tar.gz.sha256)) - [Linux arm](https://get.helm.sh/helm-v2.16.8-linux-arm.tar.gz) ([checksum](https://get.helm.sh/helm-v2.16.8-linux-arm.tar.gz.sha256)) - [Linux arm64](https://get.helm.sh/helm-v2.16.8-linux-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v2.16.8-linux-arm64.tar.gz.sha256)) - [Linux i386](https://get.helm.sh/helm-v2.16.8-linux-386.tar.gz) ([checksum](https://get.helm.sh/helm-v2.16.8-linux-386.tar.gz.sha256)) - [Linux ppc64le](https://get.helm.sh/helm-v2.16.8-linux-ppc64le.tar.gz) ([checksum](https://get.helm.sh/helm-v2.16.8-linux-ppc64le.tar.gz.sha256)) - [Linux s390x](https://get.helm.sh/helm-v2.16.8-linux-s390x.tar.gz) ([checksum](https://get.helm.sh/helm-v2.16.8-linux-s390x.tar.gz.sha256)) - [Windows amd64](https://get.helm.sh/helm-v2.16.8-windows-amd64.zip) ([checksum](https://get.helm.sh/helm-v2.16.8-windows-amd64.zip.sha256)) This release was signed with `967F 8AC5 E221 6F9F 4FD2 70AD 92AA 783C BAAE 8E3B` and can be found at @bacongobbler's [keybase account](https://keybase.io/bacongobbler). Please use the attached signatures for verifying this release using `gpg`. Once you have the client installed, upgrade Tiller with `helm init --upgrade`. The [Quickstart Guide](https://docs.helm.sh/using_helm/#quickstart-guide) will get you going from there. For **upgrade instructions** or detailed installation notes, check the [install guide](https://docs.helm.sh/using_helm/#installing-helm). You can also use a [script to install](https://raw.githubusercontent.com/helm/helm/master/scripts/get) on any system with `bash`. ## What's Next - v2.16.9 will contain only bug fixes. ## Changelog - fix(ci): use go 1.14 7606f0879c9eef980e652bd74842c6dcf1ee28a7 (Adam Reese)