Amazon Linux 1 (EOL) Security Advisory: ALAS-2025-1982
Advisory Released Date: 2025-06-09
Advisory Updated Date: 2025-06-09
Severity:
Important
Issue Overview:
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted. (CVE-2025-22869)
Affected Packages:
amazon-ssm-agent
Issue Correction:
Run yum update amazon-ssm-agent to update your system.
New Packages:
src:
amazon-ssm-agent-3.3.2299.0-1.amzn1.src
x86_64:
amazon-ssm-agent-3.3.2299.0-1.amzn1.x86_64