| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: amazon-ssm-agent | Distribution: openSUSE Tumbleweed |
| Version: 3.3.4121.0 | Vendor: openSUSE |
| Release: 1.1 | Build date: Tue Mar 31 11:11:38 2026 |
| Group: System/Management | Build host: reproducible |
| Size: 109950784 | Source RPM: amazon-ssm-agent-3.3.4121.0-1.1.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://github.com/aws/amazon-ssm-agent | |
| Summary: Amazon Remote System Config Management | |
This package provides the Amazon SSM Agent for managing EC2 Instances using Amazon EC2 Systems Manager (SSM). The SSM Agent runs on EC2 or on-premise instances and enables you to quickly and easily execute remote commands or scripts against one or more instances. When you execute a command, the agent on the instance processes the document and configures the instance as specified. This collection of capabilities helps you automate management tasks such as collecting system inventory, applying operating system (OS) patches, automating the creation of Amazon Machine Images (AMIs), and configuring operating systems (OSs) and applications at scale. Systems Manager works with managed instances: Amazon EC2 instances, or servers and virtual machines (VMs) in your on-premises environment that are configured for Systems Manager.
Apache-2.0
* Tue Mar 31 2026 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.3.4121.0
* Add read-only version check prior to install and uninstall
in case of occupied package manager locks
* Add ANSI processing for CloudWatch and S3 log
* Upgrade go-git to v5.17.0 and cloudflare/circl to v1.6.3
to fix CVE-2026-1229
- Switch to systemd-tmpfiles to store runtime data (jsc#PED-14843)
* Thu Mar 26 2026 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.3.4108.0
* Disable Go 1.25 container-aware GOMAXPROCS to prevent holding
cgroup file descriptors open
* Upgrade Go version to 1.25.8
- from version 3.3.3883.0
* Document CommandWorkerBufferLimit config
* Include package update in Dockerfile
* Reduce CloudWatch event message length threshold
* Upgrade Go version to 1.25.7
* Update github.com/go-git/go-git/v5 to 5.16.5
* Update greengrass version
- from version 3.3.3797.0
* Update Golang version to 1.24.12
* Updating golang.org/x/crypto from v0.37.0 to v0.47.0, golang.org/x/net
from v0.39.0 to v0.48.0 and golang.org/x/sys from v0.32.0 to v0.40.0
* Categorize integration tests by adding new tags to split fast and slow ones
* Fix bug where IP field being empty string and causing UII API failure
- Drop CVE-2025-47913.patch, merged upstream
- Raise minimum Go version to 1.25.8 in BuildRequires
* Mon Jan 05 2026 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.3.3598.0
* Allow Patch execution to persist across reboots not registered to SSM Agent
- from version 3.3.3572.0
* Fix ENV_VAR interpolation to work correctly with parameter store value
* Implement immediate retries for failed reply messages to MGS for RunCommand documents
* Improve ssm-cli get-diagnostics command log output
* Support DomainJoin endpoint for EU sovereign cloud
* Support dualstack S3 endpoint for distributor packages
* Upgrade Go version to 1.24.11
* Tue Nov 18 2025 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Add CVE-2025-47913.patch to fix an SSH client process terminating
when receiving an unexpected message type in response to a key
listing or signing request (bsc#1253611, CVE-2025-47913)
* Thu Oct 23 2025 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.3.3270.0
* Add initial IPv6 support with UseDualStackEndpoint configuration option
* Fix CPU utilization issue for instances with thousands of network interfaces
* Wed Oct 01 2025 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.3.3185.0
* Add IMDS retry count to account for EC2 droplet refresh
* Fix duplicate uid error logging in MDS module
* Update aws:Domainjoin plugin logging from Log4Net to NLog
* Upgrade Go version to 1.24.7
* Update github.com/go-git/go-git/v5 to 5.15.0
* Update golang.org/x/crypto to v0.37.0
* Update golang.org/x/net to v0.39.0
* Update golang.org/x/sys to v0.32.0
* Tue Sep 02 2025 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.3.3050.0
* Add EU sovereign cloud S3 endpoint for DownloadContent plugin
* Add configurable credential rotation max backoff interval
- from version 3.3.2958.0
* Migrate from twinj/uuid to google/uuid library
* Allow newer agent versions to be installed when deploying on Greengrass
* Harden function to remove non-admin run command documents in execution path
* Fix macOS credential refresher test issue due to missing Debugf from serialport skip file
* Enhance testability of custom certificate usage in debug SSM Agent builds
* Decouple serial port from startup and add credential refresher serialport logging
* Add GlobalEnhancedTelemetryEnabled config to README
* Add cloudwatch logs endpoint configuration to optional config for agent
* Update Greengrass component version
- from version 3.3.2746.0
* Add file privilege check before processing document state file
* Storing AWS document interpolation ENV_VAR types as environment variables
* Throw explicit error when running local cli as non-priviledged user
* Harden telemetry dynamic config folder permissions
* Add configuration option for HandshakeTimeout
- from version 3.3.2656.0
* Improve unit tests
* Add setup for emitting telemetry logs and metrics
* Add initial selection of error logs to emit to telemetry
* Simplify checkstyle and import organization in build scripts
* Update golang.org/x/net from v0.37.0 to v0.38.0
* Mon Jun 02 2025 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.3.2471.0
* Improve unit tests
* Agent hibernation reason is logged to EC2 system logs
* Add metrics for the EC2Detector and IMDS EC2 status findings
* Change Linux DomainJoin plugin parameter KeepHostName to accept
both boolean and string
* Upgrade GoLang to version 1.23.8
* Tue Apr 15 2025 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.3.2299.0
* Allow custom hibernation max interval configuration
* Refactor hibernation to fix ping leak and correct interval behavior
* Remove dependency on s3:GetObject for aws:configurePackage plugin
* Fix issue where ssm-setup-cli fails to detect whether agent is running
or stopped in non-English locales
* Fix comparison operator issue in aws:domainJoin script when executed
in Ubuntu dash
* Fix IPV6 address for IMDS in documentation and deny rule
* Add hasHardenedACL check to avoid costly recursive hardening of the data
directory on reboot
* Update golang.org/x/crypto from v0.32.0 to v0.36.0
* Update golang.org/x/net from v0.34.0 to v0.37.0
* Update golang.org/x/sys from v0.29.0 to v0.31.0
* Update golang.org/x/oauth2 from v0.24.0 to v0.28.0
* Upgrade GoLang version from v1.22 to v1.23
* Update Argot config and ensure client uses DisableHTTPDowngrade
* Add unit tests in multiple modules
- Drop CVE-2025-22870.patch, fixed upstream
* Fri Mar 07 2025 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Add patch to fix proxy bypass using IPv6 zone IDs in golang.org/x/net
* CVE-2025-22870.patch (bsc#1238702, CVE-2025-22870)
* Thu Mar 06 2025 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.3.1957.0
* Fix TestDocumentWorkerCrash integration tests
* Implement caching for platform data and refactor the code
to use cached data if available
* Replace Get-CimInstance commands with WMI alternatives for
retrieving system info
* Add configuration file and script to run the Argot static
analyzer to check for dataflow and other security invariants
* Updater to allow downgrade if current version is inactive
* Allow Agent Updater to emit intermediate metrics during
updates and add new Updater metrics
* Agent setup cli verification to rely only on exit codes
* Update SSM Agent public key to verify SSM-Setup-CLI binary signature
* Update GPG keyring to verify SSM-Agent binary signature using SSM-Setup-CLI
* Fix code branching within setupcli_data_integrity_linux.sh
* Use powershell for simplified, updated and no prompt unzip in install.bat
* Update build Golang version to 1.22.11
- from version 3.3.1802.0
* Fix TestDocumentWorkerCrash integration tests
* Implement caching for platform data and refactor the code
to use cached data if available
* Replace Get-CimInstance commands with WMI alternatives for
retrieving system info
* Add configuration file and script to run the Argot static analyzer
to check for dataflow and other security invariants
* Updater to allow downgrade if current version is inactive
* Allow Agent Updater to emit intermediate metrics during updates
and add new Updater metrics
* Agent setup cli verification to rely only on exit codes
* Update SSM Agent public key to verify SSM-Setup-CLI binary signature
* Update GPG keyring to verify SSM-Agent binary signature using SSM-Setup-CLI
* Fix code branching within setupcli_data_integrity_linux.sh
* Use powershell for simplified, updated and no prompt unzip in install.bat
* Update build Golang version to 1.22.11
* Fri Jan 17 2025 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.3.1611.0 (bsc#1235575, CVE-2025-21613)
* Update aws-sdk-go from 1.51.20 to 1.55.5
* Update golang.org/x/crypto from 0.24.0 to 0.32.0
* Update github.com/go-git/go-git/v5 from 5.12.0 to 5.13.1
* Update golang.org/x/net from 0.26.0 to 0.34.0
* Update golang.org/x/oauth2 from 0.0.0-20211005180243-6b3c2da341f1
to 0.24.0
* Fri Jan 10 2025 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.3.1345.0
* Revert "Update configurePackage to use fixed download method"
* Revert "Use a single syscall for route table for health check IP"
- from version 3.3.1311.0
* Add alternative to wmic to support Windows 2025
* Add armv7 architecture support for greengrass component
* Add support in ssm-setup-cli for standalone installation
in on-premises environments
* Fail ssm-setup-cli install command if agent config is not loadable
* Implement S3 ownership verification as an optional parameter for plugins
* Mark Session task as cancelled when MGS indicates that session is over
* Update configurePackage to use fixed download method
* Update Docker Engine version and use system environment
variables in installation path
* Update GreenGrass component minor version to 1.3.1
- from version 3.3.1230.0
* Revert compatibility hook for future Windows versions as it
increased CPU consumption for document execution on Windows.
* Revert Increase RunCommand timeout during the registration
process for the on-prem instances
* Wed Oct 30 2024 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.3.1142.0
* Fail windows update when installed version does not match
* Reduced length of IMDS errors to shorter format
* Increase the RunCommand timeout during the registration process for the on-prem instances
* Add nil check when calling GetRepository content in aws:downloadContent
* Worker process to exit if they are not successfully started and became idle
* Fix bug where unforeseen failures cause time to be incorrectly displayed in RunCommand
* Update GreenGrass component minor version to 1.3.0
* Ensure agent thread always exit after the corresponding worker process exits
* Fix IPC file filtering bug where usernames or session names containing
tmp causes agent worker to not correctly receive IPC
* Load directly from appconfig file when calling UpdateInstanceInformation
during credential refresher
* Use a single syscall for route table for health check IP
- from version 3.3.987.0
* Update default session logging destination to none
* Specify a minimum of TLS v1.2 in http client calls
* Add web-socket heartbeat to detect connection drops in the web-socket
for control and data channels sooner
* Use exponential retry for document worker, increase retry interval
and attempt count when reading IPC files
* Add wait for cloud-init in the agent updater
* Fix timeouts for update without yum endpoint connectivity
* Change in orchestration directory removal process to reduce disk space usage
* Fix Inventory detailed information invalid value check
* Fix parsing issue with DomainJoin Plugin
* Modify DomainJoin Plugin to use Kerberos REALM in username for RHEL and variants
* Change the SUSE linux zypper commands to quiet mode for the DomainJoin Plugin
* Move high volume info logs to debug level
* Remove deprecated go coverage library (golang.org/x/tools/cmd/cover)
* Add lock on session orchestration cleanup to prevent quadratic file
system lookup for large volume session users
* Upgrade GoLang to version 1.22.7
- from version 3.3.859.0
* Updated snapcraft.yml specification
- from version 3.3.808.0
* Agent updater attempts yum install/uninstall before
falling back to attempt with rpm
* Updated golang.org/x/net from v0.19.0 to v0.26.0
* Upgrade GoLang to version 1.21.11
* Add IPv6 addresses for NTP and EC2Config to default DenyList
* Update Distributor to only use Systems Manager APIs to
fetch package contents
* Tue Jul 02 2024 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.3.551.0
* Agent updater attempts yum install/uninstall before falling
back to attempt with rpm
* Updated golang.org/x/net from v0.19.0 to v0.26.0
* Upgrade GoLang to version 1.21.11
* Add IPv6 addresses for NTP and EC2Config to default DenyList
* Update Distributor to only use Systems Manager APIs to fetch package contents
- from version 3.3.484.0
* Update SSM-Setup-CLI logs related to checksum validation of latest version
- from version 3.3.418.0
* Upgrade go-github version from v8 to v61
* Increase timeouts in SSM-Setup-CLI
* Fix darwin build issue in SSM-Setup-CLI
* Fix the command builder bug to handle space char in input value
* Fix an inaccurate log when validating allowDowngrade parameter during Agent update
* Signing SSM Agent vended Windows executables
- from version 3.3.380.0
* Update AWS GO SDK to v1.51.20
- from version 3.3.337.0
* Remove yum as package manager in linux install/uninstall script
* Verify TrustedInstaller status before posting WindowsUpdate
information in aws:softwareInventory plugin
* Fri Apr 05 2024 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.3.217.0
* Add alternative outputs for agent package generation scripts
* Add support for Oracle 8.8 & 8.9, Rocky 8.8 & 8.9,
AlmaLinux 8.8 & 8.9, and RHEL 8.9 & 9.3
* Fix flaky integration test
* Fix setup-cli error code for non English systems
* Set IPR creds expiry to 30 mins for ssm agent worker
* Switch installer package manager from rpm to yum on OSes that support yum
* Upgrade GoLang to version 1.21.8
- from version 3.3.131.0
* Add integration tests for control channel and data channel module
* Remove data channel and control channel acknowledgement
functionality in MGS Interactor
- from version 3.2.2303.0
* Add integration tests for control channel module
* Revert data channel and control channel acknowledgement
functionality in MGS Interactor
* Update Greengrass component minor version to 1.2.4
* Tue Feb 13 2024 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.3.40.0
* Fix issue to execute aws:updateSSMAgent plugin through aws:rundocument plugin
* Update Messaging module to switch off ec2messages
when ssmmessages connected successfully
* Update SSM Agent Minor version from 3.2 to 3.3
- from version 3.2.2222.0
* Upgrade minimum go version in go.mod file to go 1.19
* Upgrade go-git package to v5.11.0
* Fix for bad default manifest url when updating EC2Config
- from version 3.2.2143.0
* Fixed plugin path traversal logic
* Updated aws:application plugin default param
* Fixed default param in psmodule
* Upgraded GoLang to version 1.21.5
- from version 3.2.2086.0
* Added Agent config to configure session logs destination
* Added data channel acknowledgement functionalities
* Added redirect handler and timeout for HTTP client
* Added steps to verify aws-cli installation for domainJoin plugin
* Added support for Ubuntu 23.04, Debian 11.7 & 12, and SUSE 15.5
* Adjusted random number generator logic used to get filename in downloadContent plugin
* Fixed Agent to gather application inventory from both rpm and
dpkg package managers if present in Unix instances
* Bump golang.org/x/crypto/ssh from 0.14.0 to 0.17.0
- from version 3.2.2016.0
* Added telemetry for agent core in-proc executor usage
* Added retries for Agent installation with snap on Greengrass
* Added code to update Agent config to use only Onprem Identity in Greengrass
* Added support for macOS 14 (Sonoma)
* Added Onprem registration support using ssm-setup-cli
* Fixed docker installation issues in aws:configureDocker plugin
* Fix for document worker and session worker not logging when
custom seelog configuration missing parameters
* Updated allowed regex pattern in S3 URI
* Update Agent IoT Greengrass component minor version
* Updated SUSE version in Seamless Domain Join script
* Updated Greengrass component workflow to get installed Agent version and update
Agent only when the installed Agent version doesn't match with Greengrass
component Agent version
* Upgraded GoLang version that builds agent binaries with to 1.20.11
- Update Go version requirement to 1.21
* Mon Dec 11 2023 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.2.1798.0
* Bump golang.org/x/net from 0.15.0 to 0.17.0
* Upgraded GoLang to version 1.20.10
* Fixing race condition in session datachannel unit test
- from version 3.2.1705.0
* Updated MGS Interactor to send 'Failed' status on agentJob parsing error
* Added error handling for Linux DomainJoin when service account credentials empty
* Fix for panic scenario in when running aws:configureDocker plugin
* Upgraded GoLang to version 1.20.8
* Upgraded golang.org/x/net to v0.15.0
* Added support for macOS 13 (Ventura)
- from version 3.2.1630.0
* Fix credential retrieval retry logic in credential refresher
* Reducing retrieval log level to debug in the credential
refresher after more than 3 retrieval retries
* Fix for EC2 credential retrieval errors not being
propagated to the credential refresher
* Fixing agent version input format validation
* Fix downloadPlatformOverride for AlmaLinux
* Fixed issue where removing seelog.xml file doesn't
revert minimum log level back to INFO
* Ignore non-audit files in audit folder
- from version 3.2.1542.0
* Add aws:updateSSMAgent plugin support for Flatcar Linux
* Add fix to resolve manifest url during agent update when using stable keyword
* Fix multiple issues causing tight loops during IPC connection scenarios
* Sign deb and rpm installer packages for Linux instances using new key
* Use file based IPC by default for amazon-ssm-agent
and ssm-agent-worker communication in Darwin
* Thu Aug 17 2023 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.2.1478.0
* Added fix to propagate exit code properly when command fails to start
* Added control channel acknowledgement functionalities
* Added flag to specify go version used for gosec and
govulncheck in static analysis script
* Added support for RHEL 8.7, 8.8, 9.1, 9.2
* Added support for Rocky Linux 8.7, 9.0, 9.1, 9.2
* Added support for Oracle Linux 8.7, 9.1, 9.2
* Update go version to 1.20.7
- from version 3.2.1377.0
* Stopped saving instance profile credentials to disk
* Added static agent security scans to makefile
* Updated Greengrass component minor version
- from version 3.2.1297.0
* Added retries to snap uninstall call in setupcli
* Fix for windows shutdown executable not found when compiled with golang1.19+
* Fix to return correct Agent Job ID for ack after AgentJobParseError
* Pass golang contexts for network calls in agent core to terminate cleanly
* Remove credential file dependency in agent workers implemented in 3.2.x.x versions
* Report MGS Connection Channel status to Health table
* Update Dockerfile to use Golang image from ECR repository
- from version 3.2.1241.0
* Get bucket region using signed HeadBucket request
* Updated golang.org/x/net version to 0.10.0 and
golang.org/x/crypto version to 0.9.0
* Update go version to 1.19.10
- from version 3.2.1041.0
* Add retry to handle stream data acknowledge messages
* Support latest as a version in configurePackage plugin
* Updated AWS GO SDK to v1.44.261 and disabled IMDSv1 fallback logic
* Use IP address to connect to destination server in port session
- from version 3.2.985.0
* Add Domain Join support for RHEL 8.7 and AL2022
* Add Support to send aws:updateSSMAgent replies through MGS
* Retrieve and set interface name dynamically in
aws:domainJoin plugin for Ubuntu
* Mon May 22 2023 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.2.923.0
* Update Dockerfile Go version to 1.19
* Add reporting of MGS connection status
* Add support for updating to agent version marked stable
* Add status code to MGS ack and send on message process failure
* Update golangci-lint configuration
* Add e2e tag to session shell tests
* Sun Apr 16 2023 Dirk Müller <dmueller@suse.com>
- update to 3.2.815.0:
* Add EC2 credential fallback for AssumeRoleUnauthorizedAccess
error
* Add CloudWatch log upload support for document and session
worker
* Add set-hostname support in domainjoin plugin for windows
* Add wait time in Agent updater to avoid installation issues
caused during reboots initiated by domainjoin plugin
* Add support for AlmaLinux
* Fix KeepHostName parameter without DNS IP address parameter
in domainJoin plugin
* Fix issue where carriage returns cause json conversion to
fail in aws:softwareInventory plugin
* Remove IMDS calls in Onprem during health check
* Remove S3 global endpoint fallback logic
* Update cli descriptions for registration parameters
* Update go version to 1.19.6
- update to 3.2.582.0:
* Modified EC2 credential fallback logic
- update to 3.2.574.0:
* Fixed go-vet issues by passing mocks by value
* Updated domainjoin and cloudwatch executables for windows
- update to 3.2.532.0:
* Removed explicit setting of EC2 aws credential profile
* Added public key to registration info
* Sends non-interactive command errors that occur before
command execution to data channel
* Added instance id verification to registration process
* Fri Jan 13 2023 John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to version 3.2.419.0
+ Added minimum retry sleep for Registrar RegisterManagedInstance calls
+ Explicitly skip AZ info check for on-prem and ECS targets
+ Fix for SSM-Agent that is unable to start on Apple Mac M1's (mac2.metal instances)
+ Ensuring powershell path is set to system directory on Windows
+ Load DLLs with using system/absolute paths on Windows
+ Added workaround for Samba limit when loading Active Directory ids
+ Dynamically get network interface name for SeamlessDomainJoin
+ Added install-yum-rpm to makefile to install agent on host from source code
+ Added logging for specifying credential source
+ Refactored tests to remove mocks from production binaries
+ Updated Windows DomainJoin plugin SharpZipLib and Newtonsoft.json dependencies
- from version 3.2.345.0
+ Updated yaml.v3 dependency
/etc/amazon /etc/amazon/ssm /etc/amazon/ssm/amazon-ssm-agent.json.template /etc/amazon/ssm/seelog.xml.template /usr/lib/systemd/system/amazon-ssm-agent.service /usr/lib/tmpfiles.d/amazon-ssm-agent.conf /usr/sbin/amazon-ssm-agent /usr/sbin/ssm-agent-worker /usr/sbin/ssm-cli /usr/sbin/ssm-document-worker /usr/sbin/ssm-session-logger /usr/sbin/ssm-session-worker /usr/share/doc/packages/amazon-ssm-agent /usr/share/doc/packages/amazon-ssm-agent/CONTRIBUTING.md /usr/share/doc/packages/amazon-ssm-agent/NOTICE.md /usr/share/doc/packages/amazon-ssm-agent/README.md /usr/share/doc/packages/amazon-ssm-agent/RELEASENOTES.md /usr/share/licenses/amazon-ssm-agent /usr/share/licenses/amazon-ssm-agent/LICENSE
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Aug 2 05:00:51 2026