SUSE-SU-2026:4045-1 Security update for amazon-cloudwatch-agent

This update for amazon-cloudwatch-agent fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control bsc1277995. -...

CLEANSTART-2026-CY42435 Security fixes in amazon-cloudwatch-agent 1.300071.0-r1

Package amazon-cloudwatch-agent version 1.300071.0-r1 fixes 36 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-GU39170 Security fixes in amazon-cloudwatch-agent 1.300070.0-r1

Package amazon-cloudwatch-agent version 1.300070.0-r1 fixes 37 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

OPENSUSE-SU-2026:11603-1 amazon-cloudwatch-agent-1.300071.0-2.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300071.0-2.1 package on the GA media of openSUSE Tumbleweed...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, prometheus, promxy, amazon-cloudwatch-agent-operator, pulumi, vault, promxy-fips...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: sqlexporter, jitsucom-bulker, grafana-alloy, opentelemetry-collector-contrib, splunk-otel-collector, amazon-cloudwatch-agent, bento, argo-events, cluster-api-aws-controller...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, k8sgpt, argo-workflows, grafana-alloy, opentelemetry-collector-contrib, splunk-otel-collector, kargo, nats, amazon-cloudwatch-agent, argo-rollouts, kubeflow-pipelines...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, mc, aws-otel-collector, amazon-cloudwatch-agent-operator, k8sgpt, certificate-transparency, minio, opentelemetry-collector, trillian, node-problem-detector, grafana, datadog-agent, fluent-bit-plugin-loki, prometheus-operator, keda,...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, kubevela, rancher-agent, k3s, promxy, pulumi...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, promxy, pulumi...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: wal-g, grafana-rollout-operator, fulcio, ratify, k8sgpt, tekton-chains, cis-operator, nri-haproxy, cerbos, kpt, opa, helm-operator, cloud-provider-vsphere, swagger, kuberlr, thanos-operator, rabbitmq-default-user-credential-updater, oauth2-proxy, cilium-cli, glow,...

CLEANSTART-2026-DJ79575 Security fixes in amazon-cloudwatch-agent-fips 1.300069.0-r1

Package amazon-cloudwatch-agent-fips version 1.300069.0-r1 fixes 10 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-42151, CVE-2026-44903, ghsa-fw8g-cg8f-9j28...

CLEANSTART-2026-OQ69181 Security fixes in amazon-cloudwatch-agent 1.300065.0-r1

Package amazon-cloudwatch-agent version 1.300065.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc, ghsa-5cgq-3rg8-m6cv...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3844 (ALAS-2026-3844)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300069.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3844 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject...

CLEANSTART-2026-XG16729 Security fixes in amazon-cloudwatch-agent-fips 1.300066.1-r0

Package amazon-cloudwatch-agent-fips version 1.300066.1-r0 fixes 2 vulnerabilities: CVE-2026-41602, ghsa-wf45-q9ch-q8gh...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: node-problem-detector-fips, argo-cd-fips, caddy-fips, databricks-cli, knative-eventing, cerbos, chaos-mesh-fips, dapr-fips, crossplane-provider-aws-macie2, authentik-fips, crossplane-provider-aws-appflow, kube-mgmt, step-kms-plugin, flagger-fips,...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3389 (ALAS-2026-3389)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300067.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3389 advisory. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

Important: amazon-cloudwatch-agent

Issue Overview: Arithmetic over induction variables in loops were not correctly checked for underflow or overflow in the Go compiler cmd/compile. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading to memory corruption in programs compiled with...

CLEANSTART-2026-MJ26242 Security fixes for CVE-2026-41602, ghsa-wf45-q9ch-q8gh applied in versions: 1.300066.1-r0

Multiple security vulnerabilities affect the amazon-cloudwatch-agent-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GA28186 Security fixes for CVE-2026-41602 applied in versions: 1.300066.1-r0

Security vulnerability affects the amazon-cloudwatch-agent package. This issue is resolved in later releases. See references for vulnerability details...