[FFe] [24.04 FEAT] Upload libmail-dmarc-perl

Bug #2061865 reported by Miriam España Acebal
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
libmail-dmarc-perl (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Feature Freeze Exception (FFe):
-------------------------------
I completely forgot to fill this counterpart of LP:2061379.

A MIR process has been carried out to promote libmail-dmarc-perl to main (LP:2023971), which has been ack recently by MIR Team [3] and by Security Team [4]. I reproduce the rationale we gave there:

   tldr; DMARC support in SpamAssassin is important for stronger spam filtering.

   Spam email is an ever-present and ever-evolving presence in our online lives, and SpamAssassin is a key
   tool for end users and service providers to identify likely spam for filtering. SpamAssassin 4.0,
   introduced in Ubuntu "lunar" 22.10, introduced a number of major new features including three new
   plugins, the most significant of which is the DMARC policy checker.

   DMARC (or "Domain-based Message Authentication, Reporting & Conformance" https://dmarc.org/) is a new
   convention for email service providers to communicate to email recipient programs about how to handle
   authentication failures. It builds on prior protocols (namely, SPF and DKIM) to address their
   limitations. Essentially, DMARC protects against direct domain spoofing, such that when an email
   purports to be from a given domain (say, @gmail.com or @irs.gov) but fails proper authentication using
   the authentication methods published by that domain, it tells the email receiver whether to reject the
   email as spam, quarantine it for evaluation, or something else. DMARC also establishes a way for the
   email receiver to give feedback back to the sender about emails that failed to pass this check.

   libmail-dmarc-perl contains the official Perl implementation of DMARC support. SpamAssassin is the
   primary user of this package

The new package should not break any other packages that depend on it. In the MIR bug for dmarc, the use of this feature with spamassassin has been tested [1] and dep-8 tests has been added to libmail-dmarc-perl too.

Installation of the spamassassin package with dmarc to be promoted has been tested at [2].

Final review before the upload is taking place for polishment purposes (usual things like changelog, maintainer and commit ordering or squashing...I will ink the MP).

The 'ubuntu-release' team could finally be subscribed to allow the promotion.

[1] https://bugs.launchpad.net/ubuntu/+source/libmail-dmarc-perl/+bug/2023971/comments/26
[2] https://bugs.launchpad.net/ubuntu/+source/libmail-dmarc-perl/+bug/2023971/comments/29
[3] https://bugs.launchpad.net/ubuntu/+source/libmail-dmarc-perl/+bug/2023971/comments/18
[4] https://bugs.launchpad.net/ubuntu/+source/libmail-dmarc-perl/+bug/2023971/comments/24

---------

Please, allow the upload of the libmail-dmarc-perl package proposed here to be promoted to main following the MIR process ( it needs to be seen in the component mismatches graph before promotion).

Related branches

Revision history for this message
Paride Legovini (paride) wrote :

I'll review this, as I had the occasion to discuss this with mirespace.

@mirespace some high-level questions:

- https://code.launchpad.net/~mirespace/ubuntu/+source/libmail-dmarc-perl/+git/libmail-dmarc-perl/+merge/464196 basically summarizes all your work on libmail-dmarc-perl in the context of the MIR bug, and is what got the +1 from the MIR team and security, am I right?

- The patches are needed to switch from libraries in universe to libraries in main that implement the same functionality but with a different API. Is this correct?

Thanks!

Revision history for this message
Miriam España Acebal (mirespace) wrote (last edit ):

Yes to all your questions Paride, thanks for your help on this!

The patches allow us to use:

- libnet-libidn-perl instead of libnet-idn-encode-perl
- libmime-tools-perl instead of libemail-mime-perl

The MP corresponds to the package uploaded at https://launchpad.net/~mirespace/+archive/ubuntu/libmail-dmarc-perl-suggested

I double-checked in [1] that this package installs the packages in universe that were finally considered to be part of the MIR with the spamassassin package from LP:2061379 :

libclass-inspector-perl universe
libemail-simple-perl universe
libfile-sharedir-perl universe
libnet-ip-perl universe
libregexp-common-perl universe
libmail-dmarc-perl universe

[1] https://bugs.launchpad.net/ubuntu/+source/libmail-dmarc-perl/+bug/2023971/comments/29

Revision history for this message
Paride Legovini (paride) wrote :

Thanks Miriam, considered all the the above, but also more in general all the thoughtful work done around this MIR, and after doing a high-level review of the diff, this FFe is granted.

Changed in libmail-dmarc-perl (Ubuntu):
status: New → Triaged
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package libmail-dmarc-perl - 1.20230215-1ubuntu1

---------------
libmail-dmarc-perl (1.20230215-1ubuntu1) noble; urgency=medium

  * Promoting libmail-dmarc-perl to main (LP: #2061865). Readjust
    dependencies to allow inclusion in main, so that spamassassin
    can start depending on DMARC for stronger spam filtering (LP: #2023971).
    - d/control: dependencies readjustment:
      + separate dependencies in the binary package depending on
        their use. Modules used in validation remain as binary
        dependencies and the rest, used in reporting, are moved
        to suggested dependencies.
      + drop libemail-mime-perl in favor of libmime-tools-perl and
        libemail-simple-perl (LP: #2030880).
      + libnet-libidn-perl replaces libnet-idn-encode-perl (LP: #2038929).
    - d/patches: Some refactors were needed to use libraries already
      in main that do the same function:
      + use-MIME-Entity-and-MIME-Parser-from-libmime-tools-p.patch
        to use libmime-tools-perl instead of Email::MIME (LP: #2030880).
      + change-Net-IDN-Encode-by-Net-LibIDN.patch (LP: #2038929).
    - d/tests:
      + splitting-check: validate our dependencies split through
        this check. Thanks to Sergio Durigan Jr. for all the fixing here.
      + data/*.eml: mails used in the test (the same used by spamassassin
        t/dmarc.t test).

 -- Miriam España Acebal <email address hidden> Mon, 11 Dec 2023 16:43:31 +0200

Changed in libmail-dmarc-perl (Ubuntu):
status: Triaged → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.