Ubuntu
opendmarc package

opendmarc 1.3.2-3ubuntu0.1 source package in Ubuntu

Changelog

opendmarc (1.3.2-3ubuntu0.1) bionic-security; urgency=medium

  * Merge patches from Debian.
  * SECURITY UPDATE: Signature-bypass vulnerability
    - debian/patches/pull48.patch: Correct multi-from processing so wrong
      DMARC pass is avoided.
    - CVE-2019-16378
  * SECURITY UPDATE: Other fixes
    - debian/patches/ticket137.patch: Handle base64 inside AR tokens that are
      values.
    - debian/patches/ticket146.patch: Reads from the named file instead of
      from standard input (the default).
    - debian/patches/ticket204.patch: Use lc to get value.
    - debian/patches/ticket207.patch: Fix SQL query.
    - debian/patches/ticket208.patch: Add IgnoreMailTo.
    - debian/patches/ticket212.patch: Shutdown if fp is NULL.
    - debian/patches/ticket227.patch: Fix policy check condition.

 -- Paulo Flabiano Smorigo <email address hidden>  Thu, 01 Oct 2020 12:51:30 +0000

Upload details

Uploaded by:
Paulo Flabiano Smorigo
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
mail
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
opendmarc_1.3.2.orig.tar.gz 579.5 KiB 213c4b01a9ff5dcdf331f7bd1dd6a382077abbf8ee9111852f2101ec917c2ffb
opendmarc_1.3.2-3ubuntu0.1.diff.gz 25.9 KiB 00cc695f078755cf44a7358ce3340cb814a61e2c57b820272ee64362b86f8d72
opendmarc_1.3.2-3ubuntu0.1.dsc 2.1 KiB cb54a28a3901026554c13c2d9b8166c901dbda4dab86df9af7ccb39ff47d94fb

View changes file

Binary packages built by this source

libopendmarc-dev: Headers and development libraries for the OpenDMARC library

 Domain-based Message Authentication, Reporting and Conformance (DMARC),
 builds on the successes of technologies such as DomainKeys Identified Mail
 (DKIM) and the Sender Policy Framework (SPF) to create an infrastructure that
 enforces policy on domain names that are visible to end users, and creates a
 feedback framework for identifying and tracking fraudulent use of domain
 names in email.
 .
 This package provides the required header files and development libraries for
 developing against the OpenDMARC library.

libopendmarc2: Library for DMARC validation and reporting

 Domain-based Message Authentication, Reporting and Conformance (DMARC),
 builds on the successes of technologies such as DomainKeys Identified Mail
 (DKIM) and the Sender Policy Framework (SPF) to create an infrastructure that
 enforces policy on domain names that are visible to end users, and creates a
 feedback framework for identifying and tracking fraudulent use of domain
 names in email.
 .
 This package provides library for implementing mail validation and reporting
 for the experimental DMARC standard.

libopendmarc2-dbgsym: debug symbols for libopendmarc2
opendmarc: Milter implementation of DMARC

 Domain-based Message Authentication, Reporting and Conformance (DMARC),
 builds on the successes of technologies such as DomainKeys Identified Mail
 (DKIM) and the Sender Policy Framework (SPF) to create an infrastructure that
 enforces policy on domain names that are visible to end users, and creates a
 feedback framework for identifying and tracking fraudulent use of domain
 names in email. It uses OpenDBX as an interface layer to various SQL back
 ends.
 .
 It provides the following new capabilities:
 .
 A binding between the domain name seen in the From: field of a message and
 one or both of the domain names verified by DKIM and SPF;
 .
 The capability to request that receivers enforce strict message
 authentication policy published by the author; and Comprehensive reporting,
 both forensic and aggregate, regarding suspect messages.
 .
 This package contains the OpenDMARC mail filter (Milter) for plugging into
 Milter-aware MTAs. It implements support for both message reject and DMARC
 failure reporting.

opendmarc-dbgsym: debug symbols for opendmarc
rddmarc: Sample DMARC report processing scripts collection

 There are currently three example scripts provided:
 .
   - rddmarc: Perl the script to parse DMARC summary reports
   - mkdmarc - SQL to create the tables
   - dmarcfail: Parses DMARC forensic reports from Netease and adds them to a
     MySQL database to assist in further analysis.