Amazon Linux 2027 Preview Security Advisory: ALAS2027-2026-235
Advisory Release Date: 2026-10-26 09:00 Pacific
Advisory Updated Date: 2026-10-26 09:00 Pacific
Severity:
Important
Issue Overview:
Package updates are available for Amazon Linux 2027 that fix the following vulnerabilities:
CVE-2026-92925:
A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).
Affected Packages:
valkey
Issue Correction:
Run dnf update valkey or dnf update --advisory ALAS2027-2026-235 to update your system.
New Packages:
aarch64:
valkey-devel-9.0.6-1.amzn2027.0.2.aarch64
valkey-debuginfo-9.0.6-1.amzn2027.0.2.aarch64
valkey-9.0.6-1.amzn2027.0.2.aarch64
valkey-debugsource-9.0.6-1.amzn2027.0.2.aarch64
src:
valkey-9.0.6-1.amzn2027.0.2.src
x86_64:
valkey-devel-9.0.6-1.amzn2027.0.2.x86_64
valkey-debuginfo-9.0.6-1.amzn2027.0.2.x86_64
valkey-9.0.6-1.amzn2027.0.2.x86_64
valkey-debugsource-9.0.6-1.amzn2027.0.2.x86_64