CLEANSTART-2026-VT52246 Security fixes in linkerd2 26.1.4-r0

Package linkerd2 version 26.1.4-r0 fixes 7 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-hr2v-4r36-88hr, CVE-2026-35469, CVE-2026-33186...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: k9s, linkerd2, argo-cd, aws-node-termination-handler, kubernetes, kots, rancher, argocd-image-updater, k8ssandra-client, hubble, k8sgpt, rancher-agent, istio, kiali, cert-manager-istio-csr, kubernetes-dashboard-api, tigera-operator, emissary, kargo, k3s,...

GHSA-9F94-5G5W-GF6R vulnerabilities

Vulnerabilities for packages: zizmor, linkerd2, linkerd2-proxy, wasmcloud, ztunnel, linkerd-network-validator, pixi, efs-utils, rustls-ffi, nushell, rustup, buck2, deno, zellij, linkerd-extension-init, parseable, cargo-audit, lychee, py3-xet-core, zed, ntpd-rs, qdrant...

GHSA-394X-VWMW-CRM3 vulnerabilities

Vulnerabilities for packages: zizmor, linkerd2, linkerd2-proxy, wasmcloud, ztunnel, linkerd-network-validator, pixi, efs-utils, rustls-ffi, nushell, rustup, buck2, deno, linkerd-extension-init, parseable, cargo-audit, lychee, py3-xet-core, zed, ntpd-rs, qdrant...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: flux-source-controller, helm-mapkubeapis, k9s, linkerd2, helm-operator, tw, kots, k8ssandra-client, k8sgpt, kargo, chartmuseum, zot, helm-docs, cluster-api-helm-controller, rancher-fleet, pluto, cert-manager-cmctl, nova, helm-push, kubescape, trivy-operator, cerbos,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: helm-set-status, pluto-fips, trivy, zot, cert-manager-cmctl, flux-source-controller-fips, envoy-gateway, pluto, rancher-fleet-fips, cerbos, linkerd2-fips, helm-push, teleport, k9s-fips, nova, chart-testing, cerbos-fips, harbor-fips, flux-helm-controller, headlamp,...

GHSA-QX2V-8332-M4FV vulnerabilities

Vulnerabilities for packages: buck2, efs-utils, linkerd2-proxy, linkerd2, shadowsocks-rust, mdbook, linkerd-extension-init, jujutsu, zola, pixi, uv...