CLEANSTART-2026-ZO12938 Security fixes in amazon-cloudwatch-agent-fips 1.300066.1-r1

Package amazon-cloudwatch-agent-fips version 1.300066.1-r1 fixes 20 vulnerabilities: CVE-2026-39824, CVE-2026-39835, CVE-2026-46598, CVE-2026-25681, CVE-2026-27136...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis-fips, crossplane-provider-azure-portal, tempo, longhorn-manager-fips, crossplane-provider-aws-cloudwatch-fips, vertical-pod-autoscaler-fips, crossplane-provider-aws-rds, kube-metrics-adapter-fips, linkerd2, cilium-fips, etcd, loki-fips...

Important: amazon-cloudwatch-agent

Issue Overview: Arithmetic over induction variables in loops were not correctly checked for underflow or overflow in the Go compiler cmd/compile. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading to memory corruption in programs compiled with...

CLEANSTART-2026-GA28186 Security fixes for CVE-2026-41602 applied in versions: 1.300066.1-r0

Security vulnerability affects the amazon-cloudwatch-agent package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XQ84127 Security fixes for CVE-2025-47914, CVE-2025-58181, CVE-2026-29181, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3 applied in versions: 3.4.0-r0

Multiple security vulnerabilities affect the amazon-cloudwatch-agent-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

OPENSUSE-SU-2026:10699-1 amazon-cloudwatch-agent-1.300066.1-1.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300066.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-38516

These are all security issues fixed in the amazon-cloudwatch-agent-1.300066.1-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, falco-no-driver, external-dns, cri-tools, crossplane-provider-aws-sns, cluster-api-ipam-provider-in-cluster, crossplane-provider-azure-storage, amazon-cloudwatch-agent-operator, crossplane-provider-aws-kinesis, dex, kserve-modelmesh-serving,...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, falco-no-driver, external-dns, cri-tools, crossplane-provider-aws-sns, cluster-api-ipam-provider-in-cluster, crossplane-provider-azure-storage, amazon-cloudwatch-agent-operator, crossplane-provider-aws-kinesis, dex, kserve-modelmesh-serving,...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3248 (ALAS-2026-3248)

"The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300064.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3248 advisory. url.Parse insufficiently validated the host/authority component and accepted some invalid URLs...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis-fips, kubernetes-dashboard-metrics-scraper, tempo, longhorn-manager-fips, victoriametrics, ip-masq-agent, flannel-fips, vertical-pod-autoscaler-fips, cilium-fips, etcd, github-mcp-server, loki-fips, tkn-fips, caddy, kube-vip-fips,...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis-fips, tempo, crossplane-provider-aws-rds, crossplane-provider-aws-eks-fips, amazon-cloudwatch-agent, nrdot-collector-k8s-fips, crossplane-provider-azure-authorization, crossplane-provider-aws-kinesis, aws-otel-collector-fips,...

amazon-cloudwatch-agent-1.300064.0-2.1 on GA media (moderate)

amazon-cloudwatch-agent-1.300064.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10420-1 Rating: moderate Cross-References: CVE-2026-33186 CVSS scores: CVE-2026-33186 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-33186 SUSE : 8.6...

Medium: amazon-cloudwatch-agent

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...

OPENSUSE-SU-2026:10420-1 amazon-cloudwatch-agent-1.300064.0-2.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300064.0-2.1 package on the GA media of openSUSE Tumbleweed...

Medium: amazon-cloudwatch-agent

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis-fips, kubernetes-dashboard-metrics-scraper, tempo, longhorn-manager-fips, victoriametrics, vertical-pod-autoscaler-fips, crossplane-provider-aws-rds, flannel-fips, kube-metrics-adapter-fips, cilium-fips, etcd, github-mcp-server,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis-fips, tempo, longhorn-manager-fips, crossplane-provider-aws-rds, flannel-fips, kube-metrics-adapter-fips, cilium-fips, etcd, loki-fips, ksops, cass-operator-fips, dex-fips, kyverno-policy-reporter-plugins-kyverno-fips,...

Low: amazon-cloudwatch-agent

Issue Overview: No CVE associated with this advisory Affected Packages: amazon-cloudwatch-agent Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction: Run yum update...

Low: amazon-cloudwatch-agent

Issue Overview: No CVE associated with this advisory Affected Packages: amazon-cloudwatch-agent Issue Correction: Run dnf update amazon-cloudwatch-agent --releasever 2023.10.20260216 or dnf update --advisory ALAS2023-2026-1442 --releasever 2023.10.20260216 to update your system. More information ...