p PatchFirst

SUSE-SU-2026:4045-1

SUSE-SU-2026:4045-1 · Security update for amazon-cloudwatch-agent

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for amazon-cloudwatch-agent fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control (bsc#1277995). - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276739).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • amazon-cloudwatch-agent SUSE:Linux Enterprise Module for Public Cloud 15 SP4

    Affected ranges
    • ECOSYSTEM: < 1.300069.0-150400.9.10.1

    Update to 1.300069.0-150400.9.10.1

  • amazon-cloudwatch-agent SUSE:Linux Enterprise Module for Public Cloud 15 SP5

    Affected ranges
    • ECOSYSTEM: < 1.300069.0-150400.9.10.1

    Update to 1.300069.0-150400.9.10.1

  • amazon-cloudwatch-agent SUSE:Linux Enterprise Module for Public Cloud 15 SP6

    Affected ranges
    • ECOSYSTEM: < 1.300069.0-150400.9.10.1

    Update to 1.300069.0-150400.9.10.1

  • amazon-cloudwatch-agent SUSE:Linux Enterprise Module for Public Cloud 15 SP7

    Affected ranges
    • ECOSYSTEM: < 1.300069.0-150400.9.10.1

    Update to 1.300069.0-150400.9.10.1

Original sources

Check your server →