Amazon Linux 2027 Preview Security Advisory: ALAS2027-2026-271
Advisory Released Date: 2026-11-02
Advisory Updated Date: 2026-11-02
Severity:
Important
Issue Overview:
Package updates are available for Amazon Linux 2027 that fix the following vulnerabilities:
CVE-2026-10758:
Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker controlled imagery to an application that uses LERC to crash the application, leading to a denial of service.
Affected Packages:
liblerc
Issue Correction:
Run dnf update liblerc --releasever 2027.0.20261102 or dnf update --advisory ALAS2027-2026-271 --releasever 2027.0.20261102 to update your system.
New Packages:
aarch64:
liblerc-devel-4.0.0-11.amzn2027.aarch64
liblerc-4.0.0-11.amzn2027.aarch64
liblerc-debuginfo-4.0.0-11.amzn2027.aarch64
liblerc-debugsource-4.0.0-11.amzn2027.aarch64
src:
liblerc-4.0.0-11.amzn2027.src
x86_64:
liblerc-devel-4.0.0-11.amzn2027.x86_64
liblerc-debugsource-4.0.0-11.amzn2027.x86_64
liblerc-debuginfo-4.0.0-11.amzn2027.x86_64
liblerc-4.0.0-11.amzn2027.x86_64