Amazon Linux 2027 Preview Security Advisory: ALAS2027-2026-164
Advisory Release Date: 2026-10-12 09:00 Pacific
Advisory Updated Date: 2026-10-20 15:48 Pacific
Severity:
Important
Issue Overview:
Package updates are available for Amazon Linux 2027 that fix the following vulnerabilities:
CVE-2026-19816:
A flaw was found in PackageKit. In the dnf5 backend, the RepoRemove handler ignores the SIMULATE transaction flag and executes a real package removal, allowing an unprivileged local user to uninstall packages without polkit authorization.
Affected Packages:
PackageKit
Issue Correction:
Run dnf update PackageKit or dnf update --advisory ALAS2027-2026-164 to update your system.
New Packages:
aarch64:
PackageKit-glib-1.4.0-1.amzn2027.aarch64
PackageKit-command-not-found-debuginfo-1.4.0-1.amzn2027.aarch64
PackageKit-glib-debuginfo-1.4.0-1.amzn2027.aarch64
PackageKit-cron-1.4.0-1.amzn2027.aarch64
PackageKit-gtk3-module-debuginfo-1.4.0-1.amzn2027.aarch64
PackageKit-devel-1.4.0-1.amzn2027.aarch64
PackageKit-command-not-found-1.4.0-1.amzn2027.aarch64
PackageKit-gtk3-module-1.4.0-1.amzn2027.aarch64
PackageKit-glib-devel-1.4.0-1.amzn2027.aarch64
PackageKit-debugsource-1.4.0-1.amzn2027.aarch64
PackageKit-debuginfo-1.4.0-1.amzn2027.aarch64
PackageKit-1.4.0-1.amzn2027.aarch64
src:
PackageKit-1.4.0-1.amzn2027.src
x86_64:
PackageKit-command-not-found-debuginfo-1.4.0-1.amzn2027.x86_64
PackageKit-glib-debuginfo-1.4.0-1.amzn2027.x86_64
PackageKit-debugsource-1.4.0-1.amzn2027.x86_64
PackageKit-devel-1.4.0-1.amzn2027.x86_64
PackageKit-gtk3-module-debuginfo-1.4.0-1.amzn2027.x86_64
PackageKit-cron-1.4.0-1.amzn2027.x86_64
PackageKit-gtk3-module-1.4.0-1.amzn2027.x86_64
PackageKit-command-not-found-1.4.0-1.amzn2027.x86_64
PackageKit-glib-1.4.0-1.amzn2027.x86_64
PackageKit-debuginfo-1.4.0-1.amzn2027.x86_64
PackageKit-1.4.0-1.amzn2027.x86_64
PackageKit-glib-devel-1.4.0-1.amzn2027.x86_64