CLEANSTART-2026-VT52246 Security fixes in linkerd2 26.1.4-r0

Package linkerd2 version 26.1.4-r0 fixes 7 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-hr2v-4r36-88hr, CVE-2026-35469, CVE-2026-33186...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: terraform-provider-kubernetes, hubble, rancher-agent, cilium, envoy-gateway, argo-workflows, k8sgpt-operator, kubernetes, kpt, vcluster, kubeflow-pipelines, rancher, trivy-operator, consul-k8s, gitlab-kas, falcoctl, gitlab-runner, infinispan-operator, cilium-cli,...

GHSA-9F94-5G5W-GF6R vulnerabilities

Vulnerabilities for packages: deno, ntpd-rs, zizmor, linkerd-extension-init, zellij, linkerd-network-validator, zed, lychee, pixi, linkerd2, py3-xet-core, buck2, wasmcloud, nushell, parseable, efs-utils, ztunnel, qdrant, rustup, rustls-ffi, linkerd2-proxy, cargo-audit...

GHSA-394X-VWMW-CRM3 vulnerabilities

Vulnerabilities for packages: deno, ntpd-rs, zizmor, linkerd-extension-init, linkerd-network-validator, zed, lychee, pixi, linkerd2, py3-xet-core, buck2, wasmcloud, nushell, parseable, efs-utils, ztunnel, qdrant, rustup, rustls-ffi, linkerd2-proxy, cargo-audit...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, envoy-gateway, nova, trivy-operator, helm-push, flux-source-controller, helm-mapkubeapis, cilium-cli, headlamp, zarf, k9s, cerbos, kubescape, k8sgpt, cluster-api-helm-controller, chartmuseum, linkerd2, tw, flux-helm-controller, helm-operator, zot,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: chartmuseum, trivy, envoy-gateway, k9s-fips, helm-set-status, cluster-api-helm-controller, consul-k8s-fips, rancher-fleet, trivy-fips, kargo, rancher-fleet-fips, harbor, consul-k8s, helm-operator, nova, eksctl, istio, chartmuseum-fips, headlamp-fips,...

GHSA-QX2V-8332-M4FV vulnerabilities

Vulnerabilities for packages: linkerd2, mdbook, shadowsocks-rust, zola, linkerd2-proxy, linkerd-extension-init, buck2, uv, jujutsu, pixi, efs-utils...