Amazon Linux 2027 Preview Security Advisory: ALAS2027-2026-187
Advisory Release Date: 2026-10-12 09:00 Pacific
Advisory Updated Date: 2026-10-20 15:48 Pacific
Severity:
Medium
Issue Overview:
Package updates are available for Amazon Linux 2027 that fix the following vulnerabilities:
CVE-2026-89088:
heap buffer overflow in duplicate_legacy_root_dir
NOTE: https://alioth-lists.debian.net/pipermail/parted-devel/2026-September/006032.html
CVE-2026-89085:
heap buffer overflow in _init_fats / fat_table_read
NOTE: https://alioth-lists.debian.net/pipermail/parted-devel/2026-September/006032.html
Affected Packages:
parted
Issue Correction:
Run dnf update parted or dnf update --advisory ALAS2027-2026-187 to update your system.
New Packages:
aarch64:
parted-devel-3.6-13.amzn2027.0.1.aarch64
parted-3.6-13.amzn2027.0.1.aarch64
parted-debugsource-3.6-13.amzn2027.0.1.aarch64
parted-debuginfo-3.6-13.amzn2027.0.1.aarch64
src:
parted-3.6-13.amzn2027.0.1.src
x86_64:
parted-debugsource-3.6-13.amzn2027.0.1.x86_64
parted-debuginfo-3.6-13.amzn2027.0.1.x86_64
parted-devel-3.6-13.amzn2027.0.1.x86_64
parted-3.6-13.amzn2027.0.1.x86_64