Medium: amazon-cloudwatch-agent

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...

OPENSUSE-SU-2026:10420-1 amazon-cloudwatch-agent-1.300064.0-2.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300064.0-2.1 package on the GA media of openSUSE Tumbleweed...

Medium: amazon-cloudwatch-agent

Issue Overview: net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level CVE-2025-61730 crypto/tls: Config.Clone copies...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3191 (ALAS-2026-3191)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300064.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3191 advisory. net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: libnvidia-container-fips, prometheus-adapter, mongodb-k8s-operator-version-upgrade-post-start-hook-fips, nri-postgresql, conftest, ory-kratos-fips, kube-fluentd-operator, tailscale, kubernetes-dns-node-cache, lvm-driver, openfga, hydra-fips, nri-kubernetes-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: libnvidia-container-fips, prometheus-adapter, conftest, ory-kratos-fips, kube-fluentd-operator, kubernetes-dns-node-cache, lvm-driver, openfga, hydra-fips, bank-vaults, secrets-store-csi-driver, istio-fips, gitlab-pages, prometheus-process-exporter, step-issuer-fips,...

Low: amazon-cloudwatch-agent

Issue Overview: No CVE associated with this advisory Affected Packages: amazon-cloudwatch-agent Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction: Run yum update...

Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2026-1442)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1442 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3174 (ALAS-2026-3174)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300064.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3174 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Low: amazon-cloudwatch-agent

Issue Overview: No CVE associated with this advisory Affected Packages: amazon-cloudwatch-agent Issue Correction: Run dnf update amazon-cloudwatch-agent --releasever 2023.10.20260216 or dnf update --advisory ALAS2023-2026-1442 --releasever 2023.10.20260216 to update your system. More information ...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, cert-manager-cmctl, fluxcd-kustomize-mutating-webhook, helm-set-status, cilium-cli, conjur-cli, crossplane-provider-aws-iam, ferretdb, spire-server, flux-notification-controller, mc, thanos-operator, actions-runner-controller, bento, eksctl,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cilium-cli, http-echo, flux-notification-controller, guac, steampipe, kubernetes-csi-driver-nfs, newrelic-nri-statsd, gke-gcloud-auth-plugin, nri-mongodb, kyverno-policy-reporter-kyverno-plugin, wazero, wave, kubernetes-release, apache-exporter,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cilium-cli, http-echo, flux-notification-controller, guac, steampipe, kubernetes-csi-driver-nfs, newrelic-nri-statsd, gke-gcloud-auth-plugin, nri-mongodb, kyverno-policy-reporter-kyverno-plugin, wazero, wave, kubernetes-release, apache-exporter,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cilium-cli, http-echo, flux-notification-controller, guac, steampipe, kubernetes-csi-driver-nfs, newrelic-nri-statsd, gke-gcloud-auth-plugin, nri-mongodb, kyverno-policy-reporter-kyverno-plugin, wazero, wave, kubernetes-release, apache-exporter,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, cilium-cli, http-echo, flux-notification-controller, guac, steampipe, kubernetes-csi-driver-nfs, newrelic-nri-statsd, gke-gcloud-auth-plugin, nri-mongodb, kyverno-policy-reporter-kyverno-plugin, wazero, wave, kubernetes-release, apache-exporter,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, cert-manager-cmctl, fluxcd-kustomize-mutating-webhook, helm-set-status, cilium-cli, conjur-cli, crossplane-provider-aws-iam, ferretdb, spire-server, http-echo, nri-couchbase, flux-notification-controller, mc, thanos-operator,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, cert-manager-cmctl, fluxcd-kustomize-mutating-webhook, helm-set-status, cilium-cli, conjur-cli, crossplane-provider-aws-iam, ferretdb, spire-server, http-echo, nri-couchbase, flux-notification-controller, mc, thanos-operator,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, cert-manager-cmctl, fluxcd-kustomize-mutating-webhook, helm-set-status, cilium-cli, conjur-cli, crossplane-provider-aws-iam, ferretdb, spire-server, flux-notification-controller, mc, thanos-operator, actions-runner-controller, bento, eksctl,...

CVE-2022-23511

A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and logs from Amazon EC2 instances and on-premises servers, in versions up to and including v1.247354. When users trigger a repair of the Agent, a pop-up window opens with SYSTEM...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2025-3120 (ALAS-2025-3120)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300062.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3120 advisory. SSH Agent servers do not validate the size of messages when processing new identity requests, which m...