Patch Changes
- 7a9fe57: Disable Multipath TCP in the collector image by setting
GODEBUG=multipathtcp=0
at startup, mitigating CVE-2026-98432. Go 1.24+ opens MPTCP listeners by
default. Any otherGODEBUGsettings you pass are kept, and an explicit
multipathtcp=value is left as is. This also applies to the all-in-one image.
Patching the host kernel is still the actual fix.