OPENSUSE-SU-2026:11603-1 amazon-cloudwatch-agent-1.300071.0-2.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300071.0-2.1 package on the GA media of openSUSE Tumbleweed...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: promxy-fips, amazon-cloudwatch-agent-operator-fips, vault, prometheus, promxy, pulumi, amazon-cloudwatch-agent-operator...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, node-problem-detector, minio, aws-otel-collector, jaeger, certificate-transparency, datadog-agent, prometheus-operator, prometheus-pushgateway, splunk-otel-collector, metrics-server, istio, grafana, tempo, fluent-bit-plugin-loki,...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, opentelemetry-collector-contrib, argo-rollouts, nats, argo-workflows, kubeflow-pipelines, kargo, amazon-cloudwatch-agent, tempo, k8sgpt, opentelemetry-collector, grafana-alloy...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, opentelemetry-collector-contrib, sqlexporter, bento, argo-events, jitsucom-bulker, amazon-cloudwatch-agent, cluster-api-aws-controller, grafana-alloy...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: rancher-agent, promxy, k3s, amazon-cloudwatch-agent-operator, pulumi, kubevela...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: promxy, pulumi, amazon-cloudwatch-agent-operator...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: trivy, opa, k3s, zot, wgcf, opentofu, undock, swagger, dive, prometheus-operator, nodetaint, ipfs-cluster, grafana-rollout-operator, libnvidia-container, helm-operator, cni-plugins, nri-consul, kind, aws-eks-pod-identity-agent, kubernetes-csi-driver-nfs, wal-g,...

CLEANSTART-2026-DJ79575 Security fixes in amazon-cloudwatch-agent-fips 1.300069.0-r1

Package amazon-cloudwatch-agent-fips version 1.300069.0-r1 fixes 10 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-42151, CVE-2026-44903, ghsa-fw8g-cg8f-9j28...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, helm-operator-fips, azurefile-csi-fips, kiali-fips, aws-node-termination-handler, aws-fsx-csi-driver-fips, crossplane-provider-aws-macie2, knative-operator-fips, kserve-localmodelnode-agent, crossplane-function-patch-and-transform,...

Important: amazon-cloudwatch-agent

Issue Overview: Arithmetic over induction variables in loops were not correctly checked for underflow or overflow in the Go compiler cmd/compile. As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading to memory corruption in programs compiled with...

CLEANSTART-2026-GA28186 Security fixes for CVE-2026-41602 applied in versions: 1.300066.1-r0

Security vulnerability affects the amazon-cloudwatch-agent package. This issue is resolved in later releases. See references for vulnerability details...

OPENSUSE-SU-2026:10699-1 amazon-cloudwatch-agent-1.300066.1-1.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300066.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-38516

These are all security issues fixed in the amazon-cloudwatch-agent-1.300066.1-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-MH2Q-Q3FH-2475 vulnerabilities

Vulnerabilities for packages: net-kourier, trivy, crossplane-provider-aws-elasticache, crossplane-provider-aws-cloudfront, crossplane-provider-azure-storage, node-problem-detector, flux-image-reflector-controller, kubernetes-event-exporter, opentofu, undock, gitlab-kas, kargo,...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3248 (ALAS-2026-3248)

"The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300064.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3248 advisory. url.Parse insufficiently validated the host/authority component and accepted some invalid URLs...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: git-lfs, azurefile-csi-fips, kiali-fips, aws-node-termination-handler, juicefs-csi-driver, aws-fsx-csi-driver-fips, knative-operator-fips, mockery, nri-apache, nri-f5, atlantis, kubewatch, crossplane-provider-aws-efs-fips, apache-exporter, govulncheck,...

amazon-cloudwatch-agent-1.300064.0-2.1 on GA media (moderate)

amazon-cloudwatch-agent-1.300064.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10420-1 Rating: moderate Cross-References: CVE-2026-33186 CVSS scores: CVE-2026-33186 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-33186 SUSE : 8.6...

Medium: amazon-cloudwatch-agent

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...

Medium: amazon-cloudwatch-agent

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...