Amazon Linux 2027 Preview Security Advisory: ALAS2027-2026-185
Advisory Release Date: 2026-10-12 09:00 Pacific
Advisory Updated Date: 2026-10-20 15:48 Pacific
Severity:
Important
Issue Overview:
Package updates are available for Amazon Linux 2027 that fix the following vulnerabilities:
CVE-2026-88807:
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.
Affected Packages:
libXrender
Issue Correction:
Run dnf update libXrender or dnf update --advisory ALAS2027-2026-185 to update your system.
New Packages:
aarch64:
libXrender-debuginfo-0.9.12-3.amzn2027.0.1.aarch64
libXrender-devel-0.9.12-3.amzn2027.0.1.aarch64
libXrender-0.9.12-3.amzn2027.0.1.aarch64
libXrender-debugsource-0.9.12-3.amzn2027.0.1.aarch64
src:
libXrender-0.9.12-3.amzn2027.0.1.src
x86_64:
libXrender-debugsource-0.9.12-3.amzn2027.0.1.x86_64
libXrender-devel-0.9.12-3.amzn2027.0.1.x86_64
libXrender-debuginfo-0.9.12-3.amzn2027.0.1.x86_64
libXrender-0.9.12-3.amzn2027.0.1.x86_64