CLEANSTART-2026-GU39170 Security fixes in amazon-cloudwatch-agent 1.300070.0-r1

Package amazon-cloudwatch-agent version 1.300070.0-r1 fixes 37 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-CY42435 Security fixes in amazon-cloudwatch-agent 1.300071.0-r1

Package amazon-cloudwatch-agent version 1.300071.0-r1 fixes 36 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

OPENSUSE-SU-2026:11603-1 amazon-cloudwatch-agent-1.300071.0-2.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300071.0-2.1 package on the GA media of openSUSE Tumbleweed...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: promxy-fips, amazon-cloudwatch-agent-operator, amazon-cloudwatch-agent-operator-fips, pulumi, promxy, prometheus, vault...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: certificate-transparency, fluent-bit-plugin-loki, minio-operator, metrics-server, mc, istio, karma, prometheus, k8sgpt, trillian, datadog-agent, prometheus-operator, aws-otel-collector, node-problem-detector, amazon-cloudwatch-agent-operator, minio,...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows, k8sgpt, opentelemetry-collector-contrib, argo-rollouts, nats, splunk-otel-collector, amazon-cloudwatch-agent, opentelemetry-collector, kargo, grafana-alloy...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, bento, jitsucom-bulker, cluster-api-aws-controller, splunk-otel-collector, argo-events, amazon-cloudwatch-agent, sqlexporter, grafana-alloy...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: pulumi, k3s, kubevela, amazon-cloudwatch-agent-operator, rancher-agent, promxy...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, promxy, pulumi...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: k3s, docker-cli, render-template, mockgen, kpt, kind, harbor-registry, step-kms-plugin, pluto, aws-otel-collector, k3d, docker-cli-buildx, src, ratify, dex, gobuster, kubernetes-dashboard-auth, guac, conftest, amazon-cloudwatch-agent-operator, gobump, ini-file,...

CLEANSTART-2026-DJ79575 Security fixes in amazon-cloudwatch-agent-fips 1.300069.0-r1

Package amazon-cloudwatch-agent-fips version 1.300069.0-r1 fixes 10 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-42151, CVE-2026-44903, ghsa-fw8g-cg8f-9j28...

CLEANSTART-2026-OQ69181 Security fixes in amazon-cloudwatch-agent 1.300065.0-r1

Package amazon-cloudwatch-agent version 1.300065.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: grafana-mimir, caddy-fips, manifest-tool, crossplane-provider-azure-spring, cert-manager-openshift-routes-fips, milvus, kgateway-fips, azure-workload-identity-webhook, kuberay-operator, kueue, amazon-cloudwatch-agent-operator-fips, ferretdb, kuberay-apiserver-fips,...

Important: amazon-cloudwatch-agent

Issue Overview: Arithmetic over induction variables in loops were not correctly checked for underflow or overflow in the Go compiler cmd/compile. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading to memory corruption in programs compiled with...

CLEANSTART-2026-GA28186 Security fixes for CVE-2026-41602 applied in versions: 1.300066.1-r0

Security vulnerability affects the amazon-cloudwatch-agent package. This issue is resolved in later releases. See references for vulnerability details...

OPENSUSE-SU-2026:10699-1 amazon-cloudwatch-agent-1.300066.1-1.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300066.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-38516

These are all security issues fixed in the amazon-cloudwatch-agent-1.300066.1-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, crossplane-provider-azure-authorization, crossplane-provider-aws-route53, buildah, crossplane-provider-aws-elasticache, crossplane-provider-aws-rds, datadog-agent, kargo, k3d, src, step-ca, skopeo, dex, cri-tools,...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3248 (ALAS-2026-3248)

"The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300064.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3248 advisory. url.Parse insufficiently validated the host/authority component and accepted some invalid URLs...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: linkerd2-cni-plugin, chisel-fips, grafana-mimir, apache-exporter, metacontroller, crossplane-aws-provider-fips, manifest-tool, nri-f5-fips, jupyterhub-k8s-image-awaiter, cert-manager-openshift-routes-fips, pgpool2exporter, milvus, azure-workload-identity-webhook,...