shield Security update for amazon-cloudwatch-agent

SUSE-SLE-Module-Public-Cloud-15-SP5-2026-4045

This update for amazon-cloudwatch-agent fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control (bsc#1277995). - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276739).

• Release Date
  Sep 7 2026
• References
  Bugzilla: 1276739, 1277995
  CVEs: CVE-2026-37236, CVE-2026-41178
• Type
  security
• Severity
  moderate

cloud_download Downloads

Public Cloud Module 15.5 aarch64

• Packages
  amazon-cloudwatch-agent
  Amazon CloudWatch Agent

  1.300069.0-150400.9.10.1 lock rpm lock src

Public Cloud Module 15.5 ppc64le

• Packages
  amazon-cloudwatch-agent
  Amazon CloudWatch Agent

  1.300069.0-150400.9.10.1 lock rpm lock src

Public Cloud Module 15.5 s390x

• Packages
  amazon-cloudwatch-agent
  Amazon CloudWatch Agent

  1.300069.0-150400.9.10.1 lock rpm lock src

Public Cloud Module 15.5 x86_64

• Packages
  amazon-cloudwatch-agent
  Amazon CloudWatch Agent

  1.300069.0-150400.9.10.1 lock rpm lock src