Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package amazon-cloudwatch-agent for
openSUSE:Factory checked in at 2026-05-06 19:18:40
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/amazon-cloudwatch-agent (Old)
and /work/SRC/openSUSE:Factory/.amazon-cloudwatch-agent.new.30200 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "amazon-cloudwatch-agent"
Wed May 6 19:18:40 2026 rev:3 rq:1351116 version:1.300066.1
Changes:
--------
---
/work/SRC/openSUSE:Factory/amazon-cloudwatch-agent/amazon-cloudwatch-agent.changes
2026-03-27 06:35:49.676151096 +0100
+++
/work/SRC/openSUSE:Factory/.amazon-cloudwatch-agent.new.30200/amazon-cloudwatch-agent.changes
2026-05-06 19:20:55.700577018 +0200
@@ -1,0 +2,27 @@
+Tue May 5 11:45:18 UTC 2026 - John Paul Adrian Glaubitz
<[email protected]>
+
+- Update to version 1.300066.1
+ * Downgrade PMD error logs for systemmetrics pipeline by @sky333999 in
(#2073)
+- from version 1.300066.0
+ * Add OTLP export support with receivers, endpoint validation,
+ and agent health integration by @JayPolanco in (#2062)
+ * Add awsneuron metrics processor for Neuron Monitor by @petruanica in
(#2050)
+ * Add otel components hyperpod efa kubelet by @mitali-salvi in (#2066)
+ * Remove ec2tagger from systemmetrics pipeline if IMDS is not accessible
+ by @sky333999 in (#2067)
+- from version 1.300065.0
+ * [Agent] Handle regex escaping for '+' in timestamp format by @jefchien in
(#2008)
+ * [Agent] Add systemmetrics pipeline for recognized hosts by @sky333999 in
(#2052)
+ * [Agent] Adds append_dimensions to collectd, supporting custom metric
dimensions
+ by @TravisStark in (#1997)
+- from version 1.300064.1
+ * Built with newer version of Go
+ - 1.25.6 (S3, SSM, ECR, DockerHub)
+ - 1.24.13 (Amazon Linux YUM)
+- Add update-apache-thrift.patch to update github.com/apache/thrift
+ to v0.23.0 in go.mod and go.sum and regenerate vendor.tar.gz
+ * Fixes TFramedTransport frame size headers can lead to a
+ uint32 integer overflow (bsc#1263550, CVE-2026-41602)
+- Drop CVE-2026-33186.patch, merged upstream
+
+-------------------------------------------------------------------
Old:
----
CVE-2026-33186.patch
amazon-cloudwatch-agent-1.300064.0.tar.gz
New:
----
amazon-cloudwatch-agent-1.300066.1.tar.gz
update-apache-thrift.patch
----------(Old B)----------
Old: uint32 integer overflow (bsc#1263550, CVE-2026-41602)
- Drop CVE-2026-33186.patch, merged upstream
----------(Old E)----------
----------(New B)----------
New: - 1.24.13 (Amazon Linux YUM)
- Add update-apache-thrift.patch to update github.com/apache/thrift
to v0.23.0 in go.mod and go.sum and regenerate vendor.tar.gz
----------(New E)----------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ amazon-cloudwatch-agent.spec ++++++
--- /var/tmp/diff_new_pack.iRlM0G/_old 2026-05-06 19:20:56.808622653 +0200
+++ /var/tmp/diff_new_pack.iRlM0G/_new 2026-05-06 19:20:56.820623148 +0200
@@ -23,7 +23,7 @@
%global import_path %{provider_prefix}
Name: amazon-cloudwatch-agent
-Version: 1.300064.0
+Version: 1.300066.1
Release: 0
Summary: Amazon CloudWatch Agent
License: MIT
@@ -31,8 +31,8 @@
URL: https://github.com/aws/amazon-cloudwatch-agent
Source0: %{repo}-%{version}.tar.gz
Source1: vendor.tar.gz
-# PATCH-FIX-UPSTREAM - grpc: enforce strict path checking for incoming
requests on the server
-Patch0: CVE-2026-33186.patch
+# PATCH-FIX-UPSTREAM - Update github.com/apache/thrift to v0.23.0 to fix
CVE-2026-41602
+Patch0: update-apache-thrift.patch
BuildRequires: go >= 1.23.6
BuildRequires: golang-packaging
ExcludeArch: %{arm} %{ix86}
@@ -47,9 +47,7 @@
%prep
%setup -q -n %{repo}-%{version}
%setup -q -D -T -a 1 -n %{repo}-%{version}
-pushd vendor/google.golang.org/grpc
%patch -P0 -p1
-popd
%build
%goprep %{import_path}
++++++ _service ++++++
--- /var/tmp/diff_new_pack.iRlM0G/_old 2026-05-06 19:20:56.860624795 +0200
+++ /var/tmp/diff_new_pack.iRlM0G/_new 2026-05-06 19:20:56.864624959 +0200
@@ -3,7 +3,7 @@
<param name="url">https://github.com/aws/amazon-cloudwatch-agent</param>
<param name="scm">git</param>
<param name="exclude">.git</param>
- <param name="revision">v1.300064.0</param>
+ <param name="revision">v1.300066.1</param>
<param name="versionformat">@PARENT_TAG@</param>
<param name="changesgenerate">enable</param>
<param name="versionrewrite-pattern">v(.*)</param>
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.iRlM0G/_old 2026-05-06 19:20:56.892626113 +0200
+++ /var/tmp/diff_new_pack.iRlM0G/_new 2026-05-06 19:20:56.896626278 +0200
@@ -1,6 +1,6 @@
<servicedata>
<service name="tar_scm">
<param
name="url">https://github.com/aws/amazon-cloudwatch-agent</param>
- <param
name="changesrevision">66540c16db9ce10899657c448a56b112628fa535</param></service></servicedata>
+ <param
name="changesrevision">e4acb581894344a773a0f0a577bdb7d3409bab4c</param></service></servicedata>
(No newline at EOF)
++++++ amazon-cloudwatch-agent-1.300064.0.tar.gz ->
amazon-cloudwatch-agent-1.300066.1.tar.gz ++++++
/work/SRC/openSUSE:Factory/amazon-cloudwatch-agent/amazon-cloudwatch-agent-1.300064.0.tar.gz
/work/SRC/openSUSE:Factory/.amazon-cloudwatch-agent.new.30200/amazon-cloudwatch-agent-1.300066.1.tar.gz
differ: char 12, line 1
++++++ update-apache-thrift.patch ++++++
diff --git a/go.mod b/go.mod
index 9c7fc3a3..9b8f9ee1 100644
--- a/go.mod
+++ b/go.mod
@@ -285,7 +285,7 @@ require (
github.com/antchfx/xpath v1.3.6 // indirect
github.com/apache/arrow/go/v12 v12.0.1 // indirect
github.com/apache/arrow/go/v15 v15.0.2 // indirect
- github.com/apache/thrift v0.21.0 // indirect
+ github.com/apache/thrift v0.23.0 // indirect
github.com/armon/go-metrics v0.4.1 // indirect
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 //
indirect
github.com/aws/aws-msk-iam-sasl-signer-go v1.0.1 // indirect
diff --git a/go.sum b/go.sum
index 35bd8c40..d389c8ad 100644
--- a/go.sum
+++ b/go.sum
@@ -267,6 +267,8 @@ github.com/apache/arrow/go/v15 v15.0.2
h1:60IliRbiyTWCWjERBCkO1W4Qun9svcYoZrSLcy
github.com/apache/arrow/go/v15 v15.0.2/go.mod
h1:DGXsR3ajT524njufqf95822i+KTh+yea1jass9YXgjA=
github.com/apache/thrift v0.21.0
h1:tdPmh/ptjE1IJnhbhrcl2++TauVjy242rkV/UzJChnE=
github.com/apache/thrift v0.21.0/go.mod
h1:W1H8aR/QRtYNvrPeFXBtobyRkd0/YVhTc6i07XIAgDw=
+github.com/apache/thrift v0.23.0
h1:wKR6YnefQSEnxpEfmgTPuJibNG4bF0p2TK34tHLWi3s=
+github.com/apache/thrift v0.23.0/go.mod
h1:zPt6WxgvTOM6hF92y8C+MkEM5LMxZuk4JcQOiU4Esvs=
github.com/aristanetworks/glog v0.0.0-20191112221043-67e8567f59f3
h1:Bmjk+DjIi3tTAU0wxGaFbfjGUqlxxSXARq9A96Kgoos=
github.com/aristanetworks/glog v0.0.0-20191112221043-67e8567f59f3/go.mod
h1:KASm+qXFKs/xjSoWn30NrWBBvdTTQq+UjkhjEJHfSFA=
github.com/aristanetworks/goarista v0.0.0-20190325233358-a123909ec740
h1:FD4/ikKOFxwP8muWDypbmBWc634+YcAs3eBrYAmRdZY=
++++++ vendor.tar.gz ++++++
/work/SRC/openSUSE:Factory/amazon-cloudwatch-agent/vendor.tar.gz
/work/SRC/openSUSE:Factory/.amazon-cloudwatch-agent.new.30200/vendor.tar.gz
differ: char 9, line 1
