OPENSUSE-SU-2026:11603-1 amazon-cloudwatch-agent-1.300071.0-2.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300071.0-2.1 package on the GA media of openSUSE Tumbleweed...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: promxy, vault, promxy-fips, prometheus, amazon-cloudwatch-agent-operator, amazon-cloudwatch-agent-operator-fips, pulumi...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, tempo, nats, argo-rollouts, argo-workflows, grafana-alloy, kargo, kubeflow-pipelines, amazon-cloudwatch-agent, opentelemetry-collector-contrib, k8sgpt, opentelemetry-collector...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: minio, prometheus, trillian, cloud-sql-proxy, mc, grafana, tempo, amazon-cloudwatch-agent-operator, aws-otel-collector, prometheus-operator, minio-operator, opentelemetry-collector, metrics-server, datadog-agent, fluent-bit-plugin-loki, certificate-transparency,...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, jitsucom-bulker, cluster-api-aws-controller, grafana-alloy, bento, sqlexporter, amazon-cloudwatch-agent, opentelemetry-collector-contrib, argo-events...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: pulumi, promxy, amazon-cloudwatch-agent-operator...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: k3s, kubevela, amazon-cloudwatch-agent-operator, rancher-agent, pulumi, promxy...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: prometheus, cni-plugins, envconsul, ko, cerbos, kube-bench, nri-memcached, terraform, step-kms-plugin, neuvector-sigstore-interface, kind, src, cilium-cli, prometheus-operator, lazydocker, libnvidia-container, regclient, dgraph, buildkitd, cloud-provider-vsphere,...

CLEANSTART-2026-DJ79575 Security fixes in amazon-cloudwatch-agent-fips 1.300069.0-r1

Package amazon-cloudwatch-agent-fips version 1.300069.0-r1 fixes 10 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-42151, CVE-2026-44903, ghsa-fw8g-cg8f-9j28...

CLEANSTART-2026-ZO12938 Security fixes in amazon-cloudwatch-agent-fips 1.300066.1-r1

Package amazon-cloudwatch-agent-fips version 1.300066.1-r1 fixes 20 vulnerabilities: CVE-2026-39824, CVE-2026-39835, CVE-2026-46598, CVE-2026-25681, CVE-2026-27136...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-solutions, k8sgateway, aws-node-termination-handler-fips, drone, eks-node-monitoring-agent, xeol, kube-oidc-proxy, tflint, kubernetes-csi-driver-nfs, cert-manager-webhook-pdns, kube-state-metrics-fips, etcd-fips, zarf, spegel-fips, seaweedfs...

Important: amazon-cloudwatch-agent

Issue Overview: Arithmetic over induction variables in loops were not correctly checked for underflow or overflow in the Go compiler cmd/compile. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading to memory corruption in programs compiled with...

CLEANSTART-2026-GA28186 Security fixes for CVE-2026-41602 applied in versions: 1.300066.1-r0

Security vulnerability affects the amazon-cloudwatch-agent package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XQ84127 Security fixes for CVE-2025-47914, CVE-2025-58181, CVE-2026-29181, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3 applied in versions: 3.4.0-r0

Multiple security vulnerabilities affect the amazon-cloudwatch-agent-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

OPENSUSE-SU-2026:10699-1 amazon-cloudwatch-agent-1.300066.1-1.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300066.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-38516

These are all security issues fixed in the amazon-cloudwatch-agent-1.300066.1-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, gitlab-runner, prometheus, ko, crossplane-provider-aws-sns, net-kourier, terraform, neuvector-scanner, knative-client, kubernetes-event-exporter, src, kserve-modelmesh-serving, cilium-cli, podman, flux-image-reflector-controller, cert-manager-cmct...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, gitlab-runner, prometheus, ko, crossplane-provider-aws-sns, net-kourier, terraform, neuvector-scanner, knative-client, kubernetes-event-exporter, src, kserve-modelmesh-serving, cilium-cli, podman, flux-image-reflector-controller, cert-manager-cmct...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3248 (ALAS-2026-3248)

"The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300064.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3248 advisory. url.Parse insufficiently validated the host/authority component and accepted some invalid URLs...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: helm-push, metacontroller, kubernetes-ingress-defaultbackend-fips, crossplane-provider-aws-ssm, eks-node-monitoring-agent, xeol, kube-oidc-proxy, nats-top-fips, spqr, kubernetes-dashboard-metrics-scraper-fips, kubernetes-csi-driver-nfs, kubescape-http-request-fips,...