Amazon Linux 2027 Preview Security Advisory: ALAS2027-2026-186
Advisory Release Date: 2026-10-12 09:00 Pacific
Advisory Updated Date: 2026-10-20 15:48 Pacific
Severity:
Important
Issue Overview:
Package updates are available for Amazon Linux 2027 that fix the following vulnerabilities:
CVE-2026-88806:
A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.
Affected Packages:
libX11
Issue Correction:
Run dnf update libX11 or dnf update --advisory ALAS2027-2026-186 to update your system.
New Packages:
aarch64:
libX11-1.8.13-1.amzn2027.0.1.aarch64
libX11-xcb-debuginfo-1.8.13-1.amzn2027.0.1.aarch64
libX11-xcb-1.8.13-1.amzn2027.0.1.aarch64
libX11-debuginfo-1.8.13-1.amzn2027.0.1.aarch64
libX11-devel-1.8.13-1.amzn2027.0.1.aarch64
libX11-debugsource-1.8.13-1.amzn2027.0.1.aarch64
noarch:
libX11-common-1.8.13-1.amzn2027.0.1.noarch
src:
libX11-1.8.13-1.amzn2027.0.1.src
x86_64:
libX11-xcb-debuginfo-1.8.13-1.amzn2027.0.1.x86_64
libX11-xcb-1.8.13-1.amzn2027.0.1.x86_64
libX11-debuginfo-1.8.13-1.amzn2027.0.1.x86_64
libX11-1.8.13-1.amzn2027.0.1.x86_64
libX11-debugsource-1.8.13-1.amzn2027.0.1.x86_64
libX11-devel-1.8.13-1.amzn2027.0.1.x86_64