Amazon Linux 2027 Preview Security Advisory: ALAS2027-2026-110
Advisory Release Date: 2026-10-12 09:00 Pacific
Advisory Updated Date: 2026-10-22 09:00 Pacific
Severity:
Medium
Issue Overview:
The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content. (CVE-2026-87875)
Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's scheduler (printer ACL validation and private-attribute filtering) could allow bypass of username-based access controls in certain configurations. (CVE-2026-87876)
Affected Packages:
cups
Issue Correction:
Run yum update cups to update your system.
New Packages:
aarch64:
cups-lpd-2.4.19-1.amzn2027.0.5.aarch64
cups-ipptool-debuginfo-2.4.19-1.amzn2027.0.5.aarch64
cups-client-2.4.19-1.amzn2027.0.5.aarch64
cups-client-debuginfo-2.4.19-1.amzn2027.0.5.aarch64
cups-ipptool-2.4.19-1.amzn2027.0.5.aarch64
cups-lpd-debuginfo-2.4.19-1.amzn2027.0.5.aarch64
cups-printerapp-2.4.19-1.amzn2027.0.5.aarch64
cups-libs-debuginfo-2.4.19-1.amzn2027.0.5.aarch64
cups-printerapp-debuginfo-2.4.19-1.amzn2027.0.5.aarch64
cups-devel-2.4.19-1.amzn2027.0.5.aarch64
cups-debugsource-2.4.19-1.amzn2027.0.5.aarch64
cups-libs-2.4.19-1.amzn2027.0.5.aarch64
cups-debuginfo-2.4.19-1.amzn2027.0.5.aarch64
cups-2.4.19-1.amzn2027.0.5.aarch64
noarch:
cups-filesystem-2.4.19-1.amzn2027.0.5.noarch
src:
cups-2.4.19-1.amzn2027.0.5.src
x86_64:
cups-client-debuginfo-2.4.19-1.amzn2027.0.5.x86_64
cups-debugsource-2.4.19-1.amzn2027.0.5.x86_64
cups-libs-debuginfo-2.4.19-1.amzn2027.0.5.x86_64
cups-ipptool-debuginfo-2.4.19-1.amzn2027.0.5.x86_64
cups-printerapp-2.4.19-1.amzn2027.0.5.x86_64
cups-printerapp-debuginfo-2.4.19-1.amzn2027.0.5.x86_64
cups-lpd-debuginfo-2.4.19-1.amzn2027.0.5.x86_64
cups-lpd-2.4.19-1.amzn2027.0.5.x86_64
cups-client-2.4.19-1.amzn2027.0.5.x86_64
cups-libs-2.4.19-1.amzn2027.0.5.x86_64
cups-ipptool-2.4.19-1.amzn2027.0.5.x86_64
cups-devel-2.4.19-1.amzn2027.0.5.x86_64
cups-2.4.19-1.amzn2027.0.5.x86_64
cups-debuginfo-2.4.19-1.amzn2027.0.5.x86_64