CLEANSTART-2026-VT52246 Security fixes in linkerd2 26.1.4-r0

Package linkerd2 version 26.1.4-r0 fixes 7 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-hr2v-4r36-88hr, CVE-2026-35469, CVE-2026-33186...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: trivy-operator, cloudnative-pg, gitlab-kas, dynamic-localpv-provisioner, cert-manager-istio-csr, cilium-cli, verticadb-operator, kube-arangodb, cri-tools, infinispan-operator, zarf, argo-cd, istio, argo-workflows, envoy-gateway, kubernetes-dashboard-api, kwok,...

GHSA-9F94-5G5W-GF6R vulnerabilities

Vulnerabilities for packages: zellij, wasmcloud, deno, rustls-ffi, py3-xet-core, buck2, nushell, pixi, linkerd-extension-init, zed, qdrant, linkerd2-proxy, linkerd2, rustup, ztunnel, lychee, zizmor, ntpd-rs, cargo-audit, efs-utils, linkerd-network-validator, parseable...

GHSA-394X-VWMW-CRM3 vulnerabilities

Vulnerabilities for packages: wasmcloud, deno, rustls-ffi, py3-xet-core, buck2, nushell, pixi, linkerd-extension-init, zed, qdrant, linkerd2-proxy, linkerd2, rustup, ztunnel, lychee, zizmor, ntpd-rs, cargo-audit, efs-utils, linkerd-network-validator, parseable...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: cerbos, trivy-operator, cilium-cli, zarf, flux-source-controller, helm-docs, istio, cluster-api-helm-controller, chartmuseum, envoy-gateway, tw, flux-helm-controller, flux, eksctl, zot, helm-push, k8sgpt, chart-testing, k8ssandra-client, helm-set-status, linkerd2,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: headlamp, kubescape, cluster-api-helm-controller-fips, cerbos, flux-fips, helm-operator, pluto-fips, k9s, cilium-cli, chartmuseum-fips, teleport, headlamp-fips, rancher-fleet-fips, cert-manager-cmctl-fips, chart-testing-fips, flux, flux-source-controller-fips,...

GHSA-QX2V-8332-M4FV vulnerabilities

Vulnerabilities for packages: linkerd-extension-init, shadowsocks-rust, uv, jujutsu, zola, mdbook, pixi, linkerd2, efs-utils, buck2, linkerd2-proxy...