Helm v2.16.9. Source highlight: Helm v2.16.9 is a companion release to Helm 3.2.4, which had a vulnerability in the handling of plugins. Helm 2 does not have a known security vulnerability. However, we determined that Helm 2 should fail with an error message instead of fixing malformed paths when it detected them. We believe this
Check the source notes against the package and APIs you use before upgrading.
๐ Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
โ๏ธ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
โก Performance & Enhancements (1)
backported archive improvements from v3 (#8318) 8ad7037828e5a0fca1009dabe290130da6368e39 (Matt Butcher)
๐ง Bug Fixes & Patches (3)
`#helm-dev` for discussing PRs, code, and bugs
Test, debug, and contribute charts: GitHub/helm/charts
v2.16.10 will contain only bug fixes.
๐ View Raw Release Notes (Original Developer Log)
Helm v2.16.9 is a companion release to Helm 3.2.4, which had a vulnerability in the handling of plugins. Helm 2 does not have a known security vulnerability. However, we determined that Helm 2 should fail with an error message instead of fixing malformed paths when it detected them. We believe this proactive step will decrease the likelihood of a future vulnerability.
Users are urged to upgrade. More information on the security disclosure is available [here](https://github.com/helm/helm/security/advisories?state=published).
The community keeps growing, and we'd love to see you there!
- Join the discussion in [Kubernetes Slack](https://kubernetes.slack.com):
- `#helm-users` for questions and just to hang out
- `#helm-dev` for discussing PRs, code, and bugs
- Hang out at the Public Developer Call: Thursday, 9:30 Pacific via [Zoom](https://zoom.us/j/696660622)
- Test, debug, and contribute charts: [GitHub/helm/charts](https://github.com/helm/charts)
## Installation and Upgrading
Download Helm 2.16.9. The common platform binaries are here:
- [MacOS amd64](https://get.helm.sh/helm-v2.16.9-darwin-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v2.16.9-darwin-amd64.tar.gz.sha256))
- [Linux amd64](https://get.helm.sh/helm-v2.16.9-linux-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v2.16.9-linux-amd64.tar.gz.sha256))
- [Linux arm](https://get.helm.sh/helm-v2.16.9-linux-arm.tar.gz) ([checksum](https://get.helm.sh/helm-v2.16.9-linux-arm.tar.gz.sha256))
- [Linux arm64](https://get.helm.sh/helm-v2.16.9-linux-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v2.16.9-linux-arm64.tar.gz.sha256))
- [Linux i386](https://get.helm.sh/helm-v2.16.9-linux-386.tar.gz) ([checksum](https://get.helm.sh/helm-v2.16.9-linux-386.tar.gz.sha256))
- [Linux ppc64le](https://get.helm.sh/helm-v2.16.9-linux-ppc64le.tar.gz) ([checksum](https://get.helm.sh/helm-v2.16.9-linux-ppc64le.tar.gz.sha256))
- [Linux s390x](https://get.helm.sh/helm-v2.16.9-linux-s390x.tar.gz) ([checksum](https://get.helm.sh/helm-v2.16.9-linux-s390x.tar.gz.sha256))
- [Windows amd64](https://get.helm.sh/helm-v2.16.9-windows-amd64.zip) ([checksum](https://get.helm.sh/helm-v2.16.9-windows-amd64.zip.sha256))
This release was signed with `6EA5 D759 8529 A53E` and can be found at @hickeyma [keybase](https://keybase.io/hickeyma) account. Please use the attached signatures for verifying this release using `gpg`.
Once you have the client installed, upgrade Tiller with `helm init --upgrade`.
The [Quickstart Guide](https://v2.helm.sh/docs/using_helm/#quickstart-guide) will get you going from there. For **upgrade instructions** or detailed installation notes, check the [install guide](https://v2.helm.sh/docs/using_helm/#installing-helm). You can also use a [script to install](https://raw.githubusercontent.com/helm/helm/master/scripts/get) on any system with `bash`.
## What's Next
- v2.16.10 will contain only bug fixes.
## Changelog
- backported archive improvements from v3 (#8318) 8ad7037828e5a0fca1009dabe290130da6368e39 (Matt Butcher)