Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-88806: A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | libX11 | 0:1.6.7-3.amzn2.0.6 |
| Amazon Linux · 2 | libX11-common | 0:1.6.7-3.amzn2.0.6 |
| Amazon Linux · 2 | libX11-debuginfo | 0:1.6.7-3.amzn2.0.6 |
| Amazon Linux · 2 | libX11-devel | 0:1.6.7-3.amzn2.0.6 |
Vulnerabilities 1
-
High 7.5
libX11 XkbGetMap Reply Heap-based Buffer Overflow
A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-88806.html