Amazon Linux 2023 Security Advisory: ALAS2023-2025-1038
Advisory Released Date: 2025-06-23
Advisory Updated Date: 2025-06-23
Severity:
Medium
Issue Overview:
In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding. (CVE-2025-32728)
Affected Packages:
openssh
Issue Correction:
Run dnf update openssh --releasever 2023.7.20250623 to update your system.
New Packages:
aarch64:
openssh-clients-debuginfo-8.7p1-8.amzn2023.0.15.aarch64
openssh-keycat-debuginfo-8.7p1-8.amzn2023.0.15.aarch64
pam_ssh_agent_auth-debuginfo-0.10.4-4.8.amzn2023.0.15.aarch64
pam_ssh_agent_auth-0.10.4-4.8.amzn2023.0.15.aarch64
openssh-keycat-8.7p1-8.amzn2023.0.15.aarch64
openssh-debuginfo-8.7p1-8.amzn2023.0.15.aarch64
openssh-clients-8.7p1-8.amzn2023.0.15.aarch64
openssh-server-debuginfo-8.7p1-8.amzn2023.0.15.aarch64
openssh-debugsource-8.7p1-8.amzn2023.0.15.aarch64
openssh-server-8.7p1-8.amzn2023.0.15.aarch64
openssh-8.7p1-8.amzn2023.0.15.aarch64
src:
openssh-8.7p1-8.amzn2023.0.15.src
x86_64:
openssh-clients-debuginfo-8.7p1-8.amzn2023.0.15.x86_64
openssh-server-8.7p1-8.amzn2023.0.15.x86_64
openssh-keycat-debuginfo-8.7p1-8.amzn2023.0.15.x86_64
pam_ssh_agent_auth-debuginfo-0.10.4-4.8.amzn2023.0.15.x86_64
openssh-keycat-8.7p1-8.amzn2023.0.15.x86_64
openssh-8.7p1-8.amzn2023.0.15.x86_64
openssh-server-debuginfo-8.7p1-8.amzn2023.0.15.x86_64
pam_ssh_agent_auth-0.10.4-4.8.amzn2023.0.15.x86_64
openssh-debuginfo-8.7p1-8.amzn2023.0.15.x86_64
openssh-clients-8.7p1-8.amzn2023.0.15.x86_64
openssh-debugsource-8.7p1-8.amzn2023.0.15.x86_64