SUSE-SU-2026:4662-1

SUSE-SU-2026:4662-1 · Security update for amazon-cloudwatch-agent

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for amazon-cloudwatch-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283594). Changes for amazon-cloudwatch-agent: Update to version 1.300073.0 * [Agent] Add Google Cloud support for GCE and GKE by @jefchien in (#2255), (#2258) and (#2260) * [Agent] Add opt-in self-telemetry endpoint for agent metrics by @movence in (#2246) * [ContainerInsights] Add KEDA and Karpenter metrics scraping by @Paamicky in (#2250) * [ContainerInsights] Add watch_replicaset toggle to disable the ReplicaSet informer by @movence in (#2246) * [Metrics/JMX] Format JVM metric units for Tomcat by @Paamicky in (#2235) * [ContainerInsights] Fix EKS OTel Container Insights log delivery and stabilize cluster-scoped metric identity by @sky333999 in (#2249) * [ContainerInsights] Only resolve cluster name when running in Kubernetes by @Paamicky in (#2259) * [Logs] Prevent high log throughput from stalling log collection while recording file read progress by @lorespiz in (#2253) - Update github.com/klauspost/compress to v1.18.7 (bsc#1283594, CVE-2026-63209)

Fix available

Published

2026-10-14T11:33:40Z

Updated

2026-10-14T17:30:08.609807296Z

Stack: system

Check your server →