SUSE-SU-2026:4662-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-20264662-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4662-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2026:4662-1
Upstream
Related
Published
2026-10-14T11:33:40Z
Modified
2026-10-14T17:30:08Z
Summary
Security update for amazon-cloudwatch-agent
Details

This update for amazon-cloudwatch-agent fixes the following issue:

  • CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283594).

Changes for amazon-cloudwatch-agent:

Update to version 1.300073.0

  • [Agent] Add Google Cloud support for GCE and GKE by @jefchien in (#2255), (#2258) and (#2260)
  • [Agent] Add opt-in self-telemetry endpoint for agent metrics by @movence in (#2246)
  • [ContainerInsights] Add KEDA and Karpenter metrics scraping by @Paamicky in (#2250)
  • [ContainerInsights] Add watch_replicaset toggle to disable the ReplicaSet informer by @movence in (#2246)
  • [Metrics/JMX] Format JVM metric units for Tomcat by @Paamicky in (#2235)
  • [ContainerInsights] Fix EKS OTel Container Insights log delivery and stabilize cluster-scoped metric identity by @sky333999 in (#2249)
  • [ContainerInsights] Only resolve cluster name when running in Kubernetes by @Paamicky in (#2259)
  • [Logs] Prevent high log throughput from stalling log collection while recording file read progress by @lorespiz in (#2253)
  • Update github.com/klauspost/compress to v1.18.7 (bsc#1283594, CVE-2026-63209)
References

Affected packages

SUSE:Linux Enterprise Module for Public Cloud 15 SP4
amazon-cloudwatch-agent

Package

Name
amazon-cloudwatch-agent
Purl
pkg:rpm/suse/amazon-cloudwatch-agent&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.300073.0-150400.9.18.1

Ecosystem specific 

{
    "binaries":  [
        {
            "amazon-cloudwatch-agent":  "1.300073.0-150400.9.18.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4662-1.json"
SUSE:Linux Enterprise Module for Public Cloud 15 SP5
amazon-cloudwatch-agent

Package

Name
amazon-cloudwatch-agent
Purl
pkg:rpm/suse/amazon-cloudwatch-agent&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.300073.0-150400.9.18.1

Ecosystem specific 

{
    "binaries":  [
        {
            "amazon-cloudwatch-agent":  "1.300073.0-150400.9.18.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4662-1.json"
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
amazon-cloudwatch-agent

Package

Name
amazon-cloudwatch-agent
Purl
pkg:rpm/suse/amazon-cloudwatch-agent&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.300073.0-150400.9.18.1

Ecosystem specific 

{
    "binaries":  [
        {
            "amazon-cloudwatch-agent":  "1.300073.0-150400.9.18.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4662-1.json"
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
amazon-cloudwatch-agent

Package

Name
amazon-cloudwatch-agent
Purl
pkg:rpm/suse/amazon-cloudwatch-agent&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.300073.0-150400.9.18.1

Ecosystem specific 

{
    "binaries":  [
        {
            "amazon-cloudwatch-agent":  "1.300073.0-150400.9.18.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4662-1.json"