Amazon Linux 2027 Preview Security Advisory: ALAS2027-2026-189
Advisory Release Date: 2026-10-12 09:00 Pacific
Advisory Updated Date: 2026-10-20 15:48 Pacific
Severity:
Important
Issue Overview:
Package updates are available for Amazon Linux 2027 that fix the following vulnerabilities:
CVE-2026-100888:
A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the function dkim_canon_selecthdrs of the file libopendkim/dkim-canon.c of the component DKIM Signature Header Selection. Executing a manipulation of the argument h can lead to out-of-bounds write. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Packages:
opendkim
Issue Correction:
Run dnf update opendkim or dnf update --advisory ALAS2027-2026-189 to update your system.
New Packages:
aarch64:
opendkim-debugsource-2.11.0-0.43.amzn2027.0.2.aarch64
libopendkim-devel-2.11.0-0.43.amzn2027.0.2.aarch64
libopendkim-debuginfo-2.11.0-0.43.amzn2027.0.2.aarch64
opendkim-debuginfo-2.11.0-0.43.amzn2027.0.2.aarch64
opendkim-tools-2.11.0-0.43.amzn2027.0.2.aarch64
libopendkim-2.11.0-0.43.amzn2027.0.2.aarch64
opendkim-tools-debuginfo-2.11.0-0.43.amzn2027.0.2.aarch64
opendkim-2.11.0-0.43.amzn2027.0.2.aarch64
src:
opendkim-2.11.0-0.43.amzn2027.0.2.src
x86_64:
opendkim-debugsource-2.11.0-0.43.amzn2027.0.2.x86_64
opendkim-tools-debuginfo-2.11.0-0.43.amzn2027.0.2.x86_64
opendkim-tools-2.11.0-0.43.amzn2027.0.2.x86_64
libopendkim-2.11.0-0.43.amzn2027.0.2.x86_64
opendkim-debuginfo-2.11.0-0.43.amzn2027.0.2.x86_64
libopendkim-debuginfo-2.11.0-0.43.amzn2027.0.2.x86_64
libopendkim-devel-2.11.0-0.43.amzn2027.0.2.x86_64
opendkim-2.11.0-0.43.amzn2027.0.2.x86_64