Amazon Linux 2027 Preview Security Advisory: ALAS2027-2026-100
Advisory Release Date: 2026-09-28 09:00 Pacific
Advisory Updated Date: 2026-09-28 09:00 Pacific
Severity:
Medium
Issue Overview:
An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in the TT_Get_Var_Design implementation used by FT_Get_Var_Design_Coordinates (CVE-2026-50811)
Affected Packages:
freetype
Issue Correction:
Run yum update freetype to update your system.
New Packages:
aarch64:
freetype-debuginfo-2.14.3-1.amzn2027.0.3.aarch64
freetype-2.14.3-1.amzn2027.0.3.aarch64
freetype-demos-2.14.3-1.amzn2027.0.3.aarch64
freetype-demos-debuginfo-2.14.3-1.amzn2027.0.3.aarch64
freetype-devel-2.14.3-1.amzn2027.0.3.aarch64
freetype-debugsource-2.14.3-1.amzn2027.0.3.aarch64
src:
freetype-2.14.3-1.amzn2027.0.3.src
x86_64:
freetype-demos-debuginfo-2.14.3-1.amzn2027.0.3.x86_64
freetype-debuginfo-2.14.3-1.amzn2027.0.3.x86_64
freetype-demos-2.14.3-1.amzn2027.0.3.x86_64
freetype-2.14.3-1.amzn2027.0.3.x86_64
freetype-debugsource-2.14.3-1.amzn2027.0.3.x86_64
freetype-devel-2.14.3-1.amzn2027.0.3.x86_64