SUSE-SU-2026:4388-1

Описание

This update for amazon-cloudwatch-agent fixes the following issues:

• CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279334).
• CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279235).
• CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing :authority and Host headers in gRPC-Go xDS servers (bsc#1279393).

Changes for amazon-cloudwatch-agent:

• Update to version 1.300072.0

• [DatabaseInsights] Enable PostgreSQL execution plan collection by @AshuSrv in (#2225)
• [DatabaseInsights] Add workload detection for PostgreSQL database servers by @Paamicky in (#2220)
• [ApplicationSignals] Preserve jvm.gc.name attribute in GC runtime metrics to differentiate collector types by @ezhang6811 in (#2218)
• [DatabaseInsights] Split PostgreSQL per-resource metrics to a dedicated 60s receiver to reduce collection overhead by @EduVencovsky in (#2232)
• [Agent] Bump grpc and golang.org/x/net dependencies by @dependabot in (#2217) and @movence in (#2242)
• [Agent] Fix AKS cloud.resource_id derivation to use the cluster resource group by @jefchien in (#2237)

• Lock github.com/prometheus/common at v0.62.0

• Update to version 1.300071.0

• [OpenTelemetry] Add file tailing and Windows Events support by @jefchien in (#2206) and (#2193)
• [OpenTelemetry] Add resource_attributes support by @movence in (#2207)
• [Agent] Add set-env ctl action to persist agent environment variables by @sky333999 in (#2211)
• [Agent] Add platform-aware default configs for OpenTelemetry (host, Kubernetes, ECS) by @jefchien in (#2179)
• [Agent] Add Microsoft Azure support for VMs and AKS by @movence in (#2183)
• [OpenTelemetry] Add root-level cluster_name and standardize collection_interval by @Paamicky in (#2189)
• [Agent] Retain custom environment variables in env-config.json between translation by @jefchien in (#2131)
• [DatabaseInsights] Add severity parsing and fix multiline/timestamp for PostgreSQL server logs by @JayPolanco in (#2209)
• [Logs] Fix throttling deadlock in cloudwatchlogs output plugin when destinations are removed by @lorespiz in (#2190)
• [Logs] Fix force-flush timer permanently stalling on low-volume log streams by @musa-asad in (#2166)
• [Logs] Add journald log collection support by @Paamicky in (#2121)
• [OpenTelemetry] Add new opentelemetry section in JSON configuration to support sending telemetry to CloudWatch OTLP endpoints by @mitali-salvi in (#2152)
• [DatabaseInsights] Add support for self-managed PostgreSQL metrics and logs collection by @JayPolanco in (#2172)
• [ApplicationSignals] Fix Service Events logs and metrics pipelines to use shared AWS credential chain by @jefchien in (#2151)