Amazon Linux 2027 Preview Security Advisory: ALAS2027-2026-099
Advisory Release Date: 2026-09-28 09:00 Pacific
Advisory Updated Date: 2026-09-28 09:00 Pacific
Severity:
Important
Issue Overview:
A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially crafted archive filename containing shell metacharacters, which are not properly escaped before being passed to shell command strings. Successful exploitation requires user interaction, where a user or automated workflow invokes rpmuncompress on the malicious file, leading to high impact on the confidentiality, integrity, and availability of data accessible to the invoking user. (CVE-2026-84838)
Affected Packages:
rpm
Issue Correction:
Run yum update rpm to update your system.
New Packages:
aarch64:
rpm-plugin-audit-debuginfo-6.0.0-1.amzn2027.0.5.aarch64
rpm-build-debuginfo-6.0.0-1.amzn2027.0.5.aarch64
rpm-build-libs-6.0.0-1.amzn2027.0.5.aarch64
rpm-plugin-unshare-6.0.0-1.amzn2027.0.5.aarch64
rpm-debuginfo-6.0.0-1.amzn2027.0.5.aarch64
rpm-plugin-dbus-announce-6.0.0-1.amzn2027.0.5.aarch64
rpm-libs-6.0.0-1.amzn2027.0.5.aarch64
rpm-devel-6.0.0-1.amzn2027.0.5.aarch64
rpm-build-libs-debuginfo-6.0.0-1.amzn2027.0.5.aarch64
python3-rpm-debuginfo-6.0.0-1.amzn2027.0.5.aarch64
rpm-build-6.0.0-1.amzn2027.0.5.aarch64
rpm-sign-libs-debuginfo-6.0.0-1.amzn2027.0.5.aarch64
rpm-plugin-selinux-debuginfo-6.0.0-1.amzn2027.0.5.aarch64
rpm-plugin-syslog-6.0.0-1.amzn2027.0.5.aarch64
rpm-6.0.0-1.amzn2027.0.5.aarch64
rpm-plugin-syslog-debuginfo-6.0.0-1.amzn2027.0.5.aarch64
rpm-plugin-prioreset-debuginfo-6.0.0-1.amzn2027.0.5.aarch64
rpm-sign-libs-6.0.0-1.amzn2027.0.5.aarch64
rpm-plugin-dbus-announce-debuginfo-6.0.0-1.amzn2027.0.5.aarch64
rpm-plugin-systemd-inhibit-6.0.0-1.amzn2027.0.5.aarch64
rpm-plugin-systemd-inhibit-debuginfo-6.0.0-1.amzn2027.0.5.aarch64
rpm-libs-debuginfo-6.0.0-1.amzn2027.0.5.aarch64
rpm-plugin-unshare-debuginfo-6.0.0-1.amzn2027.0.5.aarch64
rpm-sign-6.0.0-1.amzn2027.0.5.aarch64
rpm-plugin-fapolicyd-6.0.0-1.amzn2027.0.5.aarch64
rpm-plugin-ima-debuginfo-6.0.0-1.amzn2027.0.5.aarch64
rpm-plugin-selinux-6.0.0-1.amzn2027.0.5.aarch64
rpm-sign-debuginfo-6.0.0-1.amzn2027.0.5.aarch64
rpm-debugsource-6.0.0-1.amzn2027.0.5.aarch64
rpm-devel-debuginfo-6.0.0-1.amzn2027.0.5.aarch64
rpm-plugin-fapolicyd-debuginfo-6.0.0-1.amzn2027.0.5.aarch64
rpm-plugin-ima-6.0.0-1.amzn2027.0.5.aarch64
rpm-plugin-prioreset-6.0.0-1.amzn2027.0.5.aarch64
rpm-plugin-audit-6.0.0-1.amzn2027.0.5.aarch64
python3-rpm-6.0.0-1.amzn2027.0.5.aarch64
noarch:
rpm-cron-6.0.0-1.amzn2027.0.5.noarch
rpm-apidocs-6.0.0-1.amzn2027.0.5.noarch
src:
rpm-6.0.0-1.amzn2027.0.5.src
x86_64:
rpm-sign-libs-debuginfo-6.0.0-1.amzn2027.0.5.x86_64
rpm-debuginfo-6.0.0-1.amzn2027.0.5.x86_64
rpm-plugin-audit-debuginfo-6.0.0-1.amzn2027.0.5.x86_64
rpm-plugin-systemd-inhibit-debuginfo-6.0.0-1.amzn2027.0.5.x86_64
rpm-devel-debuginfo-6.0.0-1.amzn2027.0.5.x86_64
rpm-plugin-systemd-inhibit-6.0.0-1.amzn2027.0.5.x86_64
rpm-plugin-prioreset-debuginfo-6.0.0-1.amzn2027.0.5.x86_64
rpm-plugin-dbus-announce-6.0.0-1.amzn2027.0.5.x86_64
rpm-plugin-prioreset-6.0.0-1.amzn2027.0.5.x86_64
rpm-build-6.0.0-1.amzn2027.0.5.x86_64
rpm-libs-debuginfo-6.0.0-1.amzn2027.0.5.x86_64
python3-rpm-debuginfo-6.0.0-1.amzn2027.0.5.x86_64
rpm-build-debuginfo-6.0.0-1.amzn2027.0.5.x86_64
rpm-6.0.0-1.amzn2027.0.5.x86_64
rpm-libs-6.0.0-1.amzn2027.0.5.x86_64
rpm-plugin-selinux-debuginfo-6.0.0-1.amzn2027.0.5.x86_64
rpm-plugin-dbus-announce-debuginfo-6.0.0-1.amzn2027.0.5.x86_64
rpm-sign-debuginfo-6.0.0-1.amzn2027.0.5.x86_64
rpm-plugin-ima-6.0.0-1.amzn2027.0.5.x86_64
rpm-plugin-selinux-6.0.0-1.amzn2027.0.5.x86_64
rpm-plugin-fapolicyd-6.0.0-1.amzn2027.0.5.x86_64
rpm-plugin-unshare-6.0.0-1.amzn2027.0.5.x86_64
rpm-plugin-ima-debuginfo-6.0.0-1.amzn2027.0.5.x86_64
rpm-debugsource-6.0.0-1.amzn2027.0.5.x86_64
rpm-build-libs-debuginfo-6.0.0-1.amzn2027.0.5.x86_64
rpm-plugin-syslog-debuginfo-6.0.0-1.amzn2027.0.5.x86_64
rpm-plugin-audit-6.0.0-1.amzn2027.0.5.x86_64
rpm-build-libs-6.0.0-1.amzn2027.0.5.x86_64
rpm-plugin-fapolicyd-debuginfo-6.0.0-1.amzn2027.0.5.x86_64
rpm-plugin-unshare-debuginfo-6.0.0-1.amzn2027.0.5.x86_64
rpm-sign-libs-6.0.0-1.amzn2027.0.5.x86_64
rpm-sign-6.0.0-1.amzn2027.0.5.x86_64
rpm-plugin-syslog-6.0.0-1.amzn2027.0.5.x86_64
python3-rpm-6.0.0-1.amzn2027.0.5.x86_64
rpm-devel-6.0.0-1.amzn2027.0.5.x86_64