Amazon Linux 2023 Security Advisory: ALAS2023-2026-3213
Advisory Released Date: 2026-10-12
Advisory Updated Date: 2026-10-12
Severity:
Important
Issue Overview:
A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the function dkim_canon_selecthdrs of the file libopendkim/dkim-canon.c of the component DKIM Signature Header Selection. Executing a manipulation of the argument h can lead to out-of-bounds write. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. (CVE-2026-100888)
Affected Packages:
opendkim
Issue Correction:
Run dnf update opendkim --releasever 2023.12.20261012 or dnf update --advisory ALAS2023-2026-3213 --releasever 2023.12.20261012 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation
New Packages:
aarch64:
opendkim-debugsource-2.11.0-0.42.amzn2023.aarch64
libopendkim-devel-2.11.0-0.42.amzn2023.aarch64
libopendkim-debuginfo-2.11.0-0.42.amzn2023.aarch64
opendkim-debuginfo-2.11.0-0.42.amzn2023.aarch64
libopendkim-2.11.0-0.42.amzn2023.aarch64
opendkim-tools-debuginfo-2.11.0-0.42.amzn2023.aarch64
opendkim-tools-2.11.0-0.42.amzn2023.aarch64
opendkim-2.11.0-0.42.amzn2023.aarch64
src:
opendkim-2.11.0-0.42.amzn2023.src
x86_64:
opendkim-debugsource-2.11.0-0.42.amzn2023.x86_64
libopendkim-debuginfo-2.11.0-0.42.amzn2023.x86_64
opendkim-debuginfo-2.11.0-0.42.amzn2023.x86_64
libopendkim-2.11.0-0.42.amzn2023.x86_64
libopendkim-devel-2.11.0-0.42.amzn2023.x86_64
opendkim-tools-debuginfo-2.11.0-0.42.amzn2023.x86_64
opendkim-2.11.0-0.42.amzn2023.x86_64
opendkim-tools-2.11.0-0.42.amzn2023.x86_64