Threats affecting pkg:deb/debian/opendkim

CVE-2026-101277 is a medium severity vulnerability in Trusted Domain Project OpenDKIM up to version 2.11.0. It involves the dkim_process_set function in the dkim.c file of the Tag Tokenizer component, where manipulation can cause the use of a less trusted source. The vulnerability can be exploited remotely without authentication, and public exploit code is available. The vendor has not responded to the disclosure, and no official patch information is provided.