SUSE-SU-2026:4388-1: amazon-cloudwatch-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2026:4388-1 is a vulnerability in amazon-cloudwatch-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 29-09-2026
   PublishedVulnerability first disclosed.
2. 30-09-2026
   Last modifiedVulnerability information updated.

Description

Security update for amazon-cloudwatch-agent This update for amazon-cloudwatch-agent fixes the following issues: - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279334). - CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279235). - CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing `:authority` and `Host` headers in gRPC-Go xDS servers (bsc#1279393). Changes for amazon-cloudwatch-agent: - Update to version 1.300072.0 * [DatabaseInsights] Enable PostgreSQL execution plan collection by @AshuSrv in (#2225) * [DatabaseInsights] Add workload detection for PostgreSQL database servers by @Paamicky in (#2220) * [ApplicationSignals] Preserve jvm.gc.name attribute in GC runtime metrics to differentiate collector types by @ezhang6811 in (#2218) * [DatabaseInsights] Split PostgreSQL per-resource metrics to a dedicated 60s receiver to reduce collection overhead by @EduVencovsky in (#2232) * [Agent] Bump grpc and golang.org/x/net dependencies by @dependabot in (#2217) and @movence in (#2242) * [Agent] Fix AKS cloud.resource_id derivation to use the cluster resource group by @jefchien in (#2237) - Lock github.com/prometheus/common at v0.62.0 - Update to version 1.300071.0 * [OpenTelemetry] Add file tailing and Windows Events support by @jefchien in (#2206) and (#2193) * [OpenTelemetry] Add resource_attributes support by @movence in (#2207) * [Agent] Add set-env ctl action to persist agent environment variables by @sky333999 in (#2211) * [Agent] Add platform-aware default configs for OpenTelemetry (host, Kubernetes, ECS) by @jefchien in (#2179) * [Agent] Add Microsoft Azure support for VMs and AKS by @movence in (#2183) * [OpenTelemetry] Add root-level cluster_name and standardize collection_interval by @Paamicky in (#2189) * [Agent] Retain custom environment variables in env-config.json between translation by @jefchien in (#2131) * [DatabaseInsights] Add severity parsing and fix multiline/timestamp for PostgreSQL server logs by @JayPolanco in (#2209) * [Logs] Fix throttling deadlock in cloudwatchlogs output plugin when destinations are removed by @lorespiz in (#2190) * [Logs] Fix force-flush timer permanently stalling on low-volume log streams by @musa-asad in (#2166) * [Logs] Add journald log collection support by @Paamicky in (#2121) * [OpenTelemetry] Add new opentelemetry section in JSON configuration to support sending telemetry to CloudWatch OTLP endpoints by @mitali-salvi in (#2152) * [DatabaseInsights] Add support for self-managed PostgreSQL metrics and logs collection by @JayPolanco in (#2172) * [ApplicationSignals] Fix Service Events logs and metrics pipelines to use shared AWS credential chain by @jefchien in (#2151)

No weakness data has been published for this record.