Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3844 (ALAS-2026-3844)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300069.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3844 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject...

CLEANSTART-2026-ZO12938 Security fixes in amazon-cloudwatch-agent-fips 1.300066.1-r1

Package amazon-cloudwatch-agent-fips version 1.300066.1-r1 fixes 20 vulnerabilities: CVE-2026-39824, CVE-2026-39835, CVE-2026-46598, CVE-2026-25681, CVE-2026-27136...

GHSA-Q4F6-JM68-57WW vulnerabilities

Vulnerabilities for packages: neo4j, apache-nifi, tez, management-api-for-apache-cassandra-5.0, flyway, akhq, spark, infinispan, logstash, zipkin, kserve-modelmesh, apache-activemq-artemis, apache-pulsar, wavefront-proxy, cloudwatch-exporter, thingsboard, druid, apicurio-registry,...

CVE-2026-56746 vulnerabilities

Vulnerabilities for packages: neo4j, apache-nifi, tez, management-api-for-apache-cassandra-5.0, flyway, akhq, spark, infinispan, logstash, zipkin, kserve-modelmesh, apache-activemq-artemis, apache-pulsar, wavefront-proxy, cloudwatch-exporter, thingsboard, druid, apicurio-registry,...

GHSA-4MP9-239F-G9HG vulnerabilities

Vulnerabilities for packages: neo4j, apache-nifi, tez, management-api-for-apache-cassandra-5.0, flyway, akhq, spark, infinispan, logstash, zipkin, kserve-modelmesh, apache-activemq-artemis, apache-pulsar, wavefront-proxy, cloudwatch-exporter, thingsboard, druid, apicurio-registry,...

CVE-2026-59899 vulnerabilities

Vulnerabilities for packages: neo4j, apache-nifi, tez, management-api-for-apache-cassandra-5.0, flyway, akhq, spark, infinispan, logstash, zipkin, kserve-modelmesh, apache-activemq-artemis, apache-pulsar, wavefront-proxy, cloudwatch-exporter, thingsboard, druid, apicurio-registry,...

GHSA-6CQP-G7GG-8HR5 vulnerabilities

Vulnerabilities for packages: neo4j, apache-nifi, tez, management-api-for-apache-cassandra-5.0, flyway, akhq, spark, infinispan, logstash, zipkin, kserve-modelmesh, apache-activemq-artemis, apache-pulsar, wavefront-proxy, cloudwatch-exporter, thingsboard, druid, apicurio-registry,...

GHSA-6JQX-86GH-F27W vulnerabilities

Vulnerabilities for packages: neo4j, apache-nifi, tez, management-api-for-apache-cassandra-5.0, flyway, akhq, spark, infinispan, logstash, zipkin, kserve-modelmesh, apache-activemq-artemis, apache-pulsar, wavefront-proxy, cloudwatch-exporter, thingsboard, druid, apicurio-registry,...

CVE-2026-55831 vulnerabilities

Vulnerabilities for packages: neo4j, apache-nifi, tez, management-api-for-apache-cassandra-5.0, flyway, akhq, spark, infinispan, logstash, zipkin, kserve-modelmesh, apache-activemq-artemis, apache-pulsar, wavefront-proxy, cloudwatch-exporter, thingsboard, druid, apicurio-registry,...

CVE-2026-59898 vulnerabilities

Vulnerabilities for packages: neo4j, apache-nifi, tez, management-api-for-apache-cassandra-5.0, flyway, akhq, spark, infinispan, logstash, zipkin, kserve-modelmesh, apache-activemq-artemis, apache-pulsar, wavefront-proxy, cloudwatch-exporter, thingsboard, druid, apicurio-registry,...

GHSA-4MP9-239F-G9HG vulnerabilities

Vulnerabilities for packages: opensearch, tez, apicurio-registry, akhq, apache-pulsar-fips, kafbat-ui-fips, floci, druid, kayenta-fips, floci-az, strimzi-kafka-operator, kayenta, reposilite, knative-kafka-broker-fips, kafka-bridge-fips, logstash-fips, strimzi-kafka-operator-fips, airbyte-server,...

CVE-2026-59899 vulnerabilities

Vulnerabilities for packages: opensearch, tez, apicurio-registry, akhq, apache-pulsar-fips, kafbat-ui-fips, floci, druid, kayenta-fips, floci-az, strimzi-kafka-operator, kayenta, reposilite, knative-kafka-broker-fips, kafka-bridge-fips, logstash-fips, strimzi-kafka-operator-fips, airbyte-server,...

CVE-2026-56746 vulnerabilities

Vulnerabilities for packages: opensearch, tez, apicurio-registry, akhq, apache-pulsar-fips, kafbat-ui-fips, floci, druid, kayenta-fips, floci-az, strimzi-kafka-operator, kayenta, reposilite, knative-kafka-broker-fips, kafka-bridge-fips, logstash-fips, strimzi-kafka-operator-fips, airbyte-server,...

GHSA-GCJF-9MGH-3P7G vulnerabilities

Vulnerabilities for packages: opensearch, tez, apicurio-registry, akhq, apache-pulsar-fips, kafbat-ui-fips, floci, druid, kayenta-fips, floci-az, strimzi-kafka-operator, kayenta, reposilite, knative-kafka-broker-fips, kafka-bridge-fips, logstash-fips, strimzi-kafka-operator-fips, airbyte-server,...

CVE-2026-59900 vulnerabilities

Vulnerabilities for packages: opensearch, apicurio-registry, akhq, apache-pulsar-fips, kafbat-ui-fips, floci, druid, kayenta-fips, floci-az, strimzi-kafka-operator, kayenta, reposilite, knative-kafka-broker-fips, kafka-bridge-fips, strimzi-kafka-operator-fips, airbyte-server, wazuh-indexer,...

GHSA-6JQX-86GH-F27W vulnerabilities

Vulnerabilities for packages: opensearch, tez, apicurio-registry, akhq, apache-pulsar-fips, kafbat-ui-fips, floci, druid, kayenta-fips, floci-az, strimzi-kafka-operator, kayenta, reposilite, knative-kafka-broker-fips, kafka-bridge-fips, logstash-fips, strimzi-kafka-operator-fips, airbyte-server,...

CVE-2026-56745 vulnerabilities

Vulnerabilities for packages: opensearch, tez, apicurio-registry, akhq, apache-pulsar-fips, kafbat-ui-fips, floci, druid, kayenta-fips, floci-az, strimzi-kafka-operator, kayenta, reposilite, knative-kafka-broker-fips, kafka-bridge-fips, logstash-fips, strimzi-kafka-operator-fips, airbyte-server,...

CVE-2026-55831 vulnerabilities

Vulnerabilities for packages: opensearch, tez, apicurio-registry, akhq, apache-pulsar-fips, kafbat-ui-fips, floci, druid, kayenta-fips, floci-az, strimzi-kafka-operator, kayenta, reposilite, knative-kafka-broker-fips, kafka-bridge-fips, logstash-fips, strimzi-kafka-operator-fips, airbyte-server,...

CVE-2026-59921 vulnerabilities

Vulnerabilities for packages: opensearch, tez, apicurio-registry, akhq, apache-pulsar-fips, kafbat-ui-fips, floci, druid, kayenta-fips, floci-az, strimzi-kafka-operator, kayenta, reposilite, knative-kafka-broker-fips, kafka-bridge-fips, logstash-fips, strimzi-kafka-operator-fips, airbyte-server,...

CVE-2026-59898 vulnerabilities

Vulnerabilities for packages: opensearch, tez, apicurio-registry, akhq, apache-pulsar-fips, kafbat-ui-fips, floci, druid, kayenta-fips, floci-az, strimzi-kafka-operator, kayenta, reposilite, knative-kafka-broker-fips, kafka-bridge-fips, logstash-fips, strimzi-kafka-operator-fips, airbyte-server,...