CLEANSTART-2026-VT52246 Security fixes in linkerd2 26.1.4-r0

Package linkerd2 version 26.1.4-r0 fixes 7 vulnerabilities: ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-hr2v-4r36-88hr, CVE-2026-35469, CVE-2026-33186...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: kargo, rancher-agent, trivy-operator, jitsucom-bulker, argo-workflows, kubevela, cluster-api, percona-server-mongodb-operator, kube-arangodb, terraform-provider-kubernetes, cilium, cri-tools, teleport, hubble, gitlab-runner, rancher, gitlab-kas, emissary, headlamp,...

GHSA-394X-VWMW-CRM3 vulnerabilities

Vulnerabilities for packages: py3-xet-core, parseable, zed, linkerd-extension-init, linkerd-network-validator, nushell, wasmcloud, ztunnel, pixi, qdrant, buck2, cargo-audit, rustup, ntpd-rs, zizmor, efs-utils, lychee, linkerd2, deno, rustls-ffi, linkerd2-proxy...

GHSA-9F94-5G5W-GF6R vulnerabilities

Vulnerabilities for packages: py3-xet-core, parseable, zed, linkerd-extension-init, zellij, linkerd-network-validator, nushell, wasmcloud, ztunnel, pixi, qdrant, buck2, cargo-audit, rustup, ntpd-rs, zizmor, efs-utils, lychee, linkerd2, deno, rustls-ffi, linkerd2-proxy...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: kargo, trivy-operator, cluster-api-helm-controller, flux, chart-testing, flux-helm-controller, cert-manager-cmctl, headlamp, istio, zot, kubescape, kots, cerbos, k9s, rancher-fleet, nova, helm-push, envoy-gateway, eksctl, pluto, chartmuseum, k8sgpt, helm-operator,...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: consul-k8s-fips, helm-docs, rancher-fleet-fips, pluto-fips, cert-manager-cmctl-fips, chartmuseum-fips, flux-helm-controller, linkerd2, rancher-fleet, trivy-operator, nova-fips, harbor-fips, teleport, cerbos, k9s-fips, cilium-cli, linkerd2-fips,...

GHSA-QX2V-8332-M4FV vulnerabilities

Vulnerabilities for packages: shadowsocks-rust, zola, pixi, linkerd-extension-init, linkerd2, linkerd2-proxy, buck2, jujutsu, efs-utils, mdbook, uv...