#1007926 backport opendmarc-1.4.2

Package:
opendmarc
Source:
opendmarc
Description:
Domain-based Message Authentication, Reporting and Conformance (DMARC) milter
Submitter:
Matus UHLAR - fantomas
Date:
2024-05-24 12:18:02 UTC
Severity:
normal
#1007926#5
Date:
2022-03-18 16:16:58 UTC
From:
To:
Hello opendmarc maintainer(s),

could you please upload version 1.4.2-1 to bullseye?

We've had current version crashing apparently because of bug fixed in 1.4.2:


         Fix issue #179: Don't crash when a value in a multi-valued From field
                 is missing a domain name.  Resolves CVE-2021-34555.

Also, the version 1.4.1 provides new useful option:

         Added config option HoldQuarantinedMessages (default false), which
                 controls if messages with p=quarantine will be passed on to
                 the mail stream (if False) or placed in the MTA's "hold"
                 queue (if True).  Issue #105.  Patch by Marcos Moraes, on
                 the OpenDMARC mailing list.

I have verified that 1.4.2 version does not crash on the same e-mail that
caused 1.4.0 to crash multiple times.

thank you
#1007926#10
Date:
2022-03-18 16:55:54 UTC
From:
To:
Note that the current version in bullseye is 1.4.0~beta1+dfsg-6+deb11u1,
where this bug has been patched.
#1007926#15
Date:
2023-03-07 22:16:32 UTC
From:
To:
Version 1.4.0~beta1+dfsg-6+deb11u1 from stable crashes consistently given messages from the new (migrated) postfix-users mailing list. There is something perhaps about the Arc-* headers it does not like.

Backtrace:

#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#1  0x00007f043c551537 in __GI_abort () at abort.c:79
#2  0x00007f043c55140f in __assert_fail_base (
    fmt=0x7f043c6c96a8 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n",
    assertion=0x55dce6abd1a7 "string != NULL",
    file=0x55dce6abd16b "opendmarc-arcares.c", line=104,
    function=<optimized out>) at assert.c:92
#3  0x00007f043c560662 in __GI___assert_fail (
    assertion=0x55dce6abd1a7 "string != NULL",
    file=0x55dce6abd16b "opendmarc-arcares.c", line=104,
    function=0x55dce6abd260 "opendmarc_arcares_strip_whitespace")
    at assert.c:101
#4  0x000055dce6ab7a44 in ?? ()
#5  0x000055dce6ab313f in ?? ()
#6  0x00007f043c7435ec in mi_engine ()
   from /lib/x86_64-linux-gnu/libmilter.so.1.0.1
#7  0x00007f043c745f6e in ?? () from /lib/x86_64-linux-gnu/libmilter.so.1.0.1
#8  0x00007f043c70bea7 in start_thread (arg=<optimized out>)
    at pthread_create.c:477
#9  0x00007f043c62ba2f in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Version 1.4.2-2+b1 from testing does not have this problem.
#1007926#22
Date:
2023-03-28 11:28:44 UTC
From:
To:
I’ve proposed a stable update in #1033591.