This update for amazon-cloudwatch-agent fixes the following issue:
- CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass
repeat index validation and cause a process crash (bsc#1283594).
Changes for amazon-cloudwatch-agent:
Update to version 1.300073.0
* [Agent] Add Google Cloud support for GCE and GKE by @jefchien
in (#2255), (#2258) and (#2260)
* [Agent] Add opt-in self-telemetry endpoint for agent metrics
by @movence in (#2246)
* [ContainerInsights] Add KEDA and Karpenter metrics scraping
by @Paamicky in (#2250)
* [ContainerInsights] Add watch_replicaset toggle to
This update for amazon-cloudwatch-agent fixes the following issues:
- CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization
policies via mixed-case or canonical-case header matches (bsc#1279334).
- CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279235).
- CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing `:authority` and `Host` headers in gRPC-Go xDS
servers (bsc#1279393).
Changes for amazon-cloudwatch-agent:
- Update to version 1.300072.0
* [DatabaseInsights] Enable PostgreSQL execution plan co
This update for amazon-cloudwatch-agent fixes the following issues:
- CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST
request through the X-HTTP-Method-Override header and bypass established access control (bsc#1277995).
- CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS
via oversized inputs (bsc#1276739).