ALAS2027-2026-078


Amazon Linux 2027 Preview Security Advisory: ALAS2027-2026-078
Advisory Released Date: 2026-09-28
Advisory Updated Date: 2026-11-02
Severity: Important

Issue Overview:

Backtracking leads to exponential load time in libyaml library. (CVE-2026-63676)


Affected Packages:

perl-YAML


Issue Correction:
Run dnf update perl-YAML --releasever 2027.0.20260928 or dnf update --advisory ALAS2027-2026-078 --releasever 2027.0.20260928 to update your system.

New Packages:
noarch:
    perl-YAML-1.32.1-1.amzn2027.noarch

src:
    perl-YAML-1.32.1-1.amzn2027.src