CLEANSTART-2026-VT52246 Security fixes in linkerd2 26.1.4-r0

Package linkerd2 version 26.1.4-r0 fixes 7 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-hr2v-4r36-88hr, CVE-2026-35469, CVE-2026-33186...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: trivy, zarf, terraform-provider-kubernetes, kpt, argocd-image-updater, gitlab-kas, docker-cli-buildx, k8sgpt-operator, kiali, percona-server-mongodb-operator, kube-arangodb, envoy-gateway, velero, argo-workflows, headlamp, kubernetes, cilium, cluster-api, rancher, k3...

GHSA-9F94-5G5W-GF6R vulnerabilities

Vulnerabilities for packages: buck2, pixi, rustup, nushell, parseable, linkerd-extension-init, linkerd-network-validator, ztunnel, linkerd2, linkerd2-proxy, deno, py3-xet-core, zed, qdrant, zizmor, rustls-ffi, wasmcloud, lychee, ntpd-rs, zellij, efs-utils, cargo-audit...

GHSA-394X-VWMW-CRM3 vulnerabilities

Vulnerabilities for packages: buck2, pixi, rustup, nushell, parseable, linkerd-extension-init, linkerd-network-validator, ztunnel, linkerd2, linkerd2-proxy, deno, py3-xet-core, zed, qdrant, zizmor, rustls-ffi, wasmcloud, lychee, ntpd-rs, efs-utils, cargo-audit...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: trivy, zarf, helm-mapkubeapis, cluster-api-helm-controller, envoy-gateway, helm-docs, headlamp, cert-manager-cmctl, cerbos, k8sgpt, trivy-operator, chart-testing, cilium-cli, eksctl, tw, helm-set-status, istio, consul-k8s, linkerd2, chartmuseum, pluto, kubescape, nov...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: trivy-operator, cerbos-fips, zarf, cilium-cli, headlamp-fips, kuma, cluster-api-helm-controller, cluster-api-helm-controller-fips, consul-k8s-fips, envoy-gateway-fips, kargo, linkerd2, trivy-fips, helm-push, nova-fips, trivy-operator-fips, pluto-fips, linkerd2-fips,...

GHSA-QX2V-8332-M4FV vulnerabilities

Vulnerabilities for packages: linkerd-extension-init, buck2, jujutsu, pixi, mdbook, zola, linkerd2, linkerd2-proxy, efs-utils, shadowsocks-rust, uv...