Amazon Linux 2027 Preview Security Advisory: ALAS2027-2026-225
Advisory Released Date: 2026-10-26
Advisory Updated Date: 2026-11-02
Severity:
Medium
Issue Overview:
Package updates are available for Amazon Linux 2027 that fix the following vulnerabilities:
CVE-2026-9672:
NOTE: Fixed by: https://github.com/php/php-src/commit/b590f0380fda26ed180874a0255f0be078434315 (php-8.4.24)
Affected Packages:
gd
Issue Correction:
Run dnf update gd --releasever 2027.0.20261026 or dnf update --advisory ALAS2027-2026-225 --releasever 2027.0.20261026 to update your system.
New Packages:
aarch64:
gd-devel-2.3.3-19.amzn2027.0.1.aarch64
gd-progs-debuginfo-2.3.3-19.amzn2027.0.1.aarch64
gd-debugsource-2.3.3-19.amzn2027.0.1.aarch64
gd-progs-2.3.3-19.amzn2027.0.1.aarch64
gd-debuginfo-2.3.3-19.amzn2027.0.1.aarch64
gd-2.3.3-19.amzn2027.0.1.aarch64
src:
gd-2.3.3-19.amzn2027.0.1.src
x86_64:
gd-progs-debuginfo-2.3.3-19.amzn2027.0.1.x86_64
gd-debuginfo-2.3.3-19.amzn2027.0.1.x86_64
gd-devel-2.3.3-19.amzn2027.0.1.x86_64
gd-debugsource-2.3.3-19.amzn2027.0.1.x86_64
gd-2.3.3-19.amzn2027.0.1.x86_64
gd-progs-2.3.3-19.amzn2027.0.1.x86_64