Skip to content

[Package Request] - Update amazon-ssm-agent to latest version (currently 3.3.4624.0) #1104

@rgoltz

Description

@rgoltz

What package is missing from Amazon Linux 2023? Please describe and include package name.

The amazon-ssm-agent package in the AL2023 repositories is stuck at version 3.3.4108.0 (released 2026-03-23), while 6 newer versions have been released since then. The latest version is 3.3.4624.0 (released 2026-06-02).

Versions released since the last AL2023 repo update:

Version Release Date Link
3.3.4108.0 2026-03-23 https://github.com/aws/amazon-ssm-agent/releases/tag/3.3.4108.0
3.3.4121.0 2026-03-27 https://github.com/aws/amazon-ssm-agent/releases/tag/3.3.4121.0
3.3.4177.0 2026-04-07 https://github.com/aws/amazon-ssm-agent/releases/tag/3.3.4177.0
3.3.4268.0 2026-04-22 https://github.com/aws/amazon-ssm-agent/releases/tag/3.3.4268.0
3.3.4364.0 2026-05-04 https://github.com/aws/amazon-ssm-agent/releases/tag/3.3.4364.0
3.3.4515.0 2026-05-21 https://github.com/aws/amazon-ssm-agent/releases/tag/3.3.4515.0
3.3.4624.0 2026-06-02 https://github.com/aws/amazon-ssm-agent/releases/tag/3.3.4624.0

Is this an update to existing package or new package request?

Update to existing package. The amazon-ssm-agent package is already included in AL2023 but has not been updated in the repository for almost 3 months.

Is this package available in Amazon Linux 2? If it is available via external sources such as EPEL, please specify.

Yes, amazon-ssm-agent is available in both AL2 and AL2023 repositories. The newer versions exist on GitHub and in AWS S3 buckets but have not been published to the AL2023 dnf repositories.

Any additional information you'd like to include. (use-cases, etc)

We manage a fleet of AL2023 instances and rely on dnf update for patching, including the SSM Agent. The outdated repository version is causing:

  • AWS Health notifications flagging instances as requiring an SSM Agent update — while dnf update reports no updates available
  • Version discrepancy across our fleet because the repository does not provide the current version
  • Broken patching workflow: Our standard patching process uses dnf — when the repository is outdated, we cannot bring instances into compliance through our normal pipeline
  • Security concerns: The SSM Agent is a privileged process running as root with network access. Newer releases contain dependency upgrades (e.g. golang.org/x/crypto, golang.org/x/net) and security hardening (e.g. path traversal fixes, hardened ACL checks). A 3-month lag means known security improvements are unavailable through the standard patching mechanism, leaving instances exposed longer than necessary.

AWS Support confirmed this is a known repository lag (Support Case reference available on request).

We'd appreciate if the AL2023 repository could be updated to the latest SSM Agent version and kept in sync with future releases in a timely manner.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions