Community Packages

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#77790 - [opendmarc] segfault on postfix-users mailing list

Attached to Project: Community Packages
Opened by Geert Hendrickx (ghen) - Thursday, 09 March 2023, 12:09 GMT
Last edited by Sergej Pupykin (sergej) - Monday, 08 May 2023, 20:52 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Sergej Pupykin (sergej)
Thore Bödecker (foxxx0)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

Hi

Since the recent migration of the postfix-users mailing list to mailman 3 with ARC, opendmarc is crashing on these mails.
Unfortunately, a crashed opendmarc has the potential to break ALL incoming mail, depending on postfix configuration.

This crash is not Arch-specific, it has been confirmed by many other Postfix-users subscribers as well, apparantly due to larger-than-usual ARC seals generated by this mailing list.

Could you include following patch which has been reported to fix this crash:

https://marc.info/?l=postfix-users&m=167830287325223&w=2
https://github.com/andreasschulze/OpenDMARC/commit/e8e7b41fef40032398d35650489a717108ac70de
https://github.com/trusteddomainproject/OpenDMARC/issues/183

(Since the OpenDMARC project seems unmaintained, I don't expect a patched release soon...)


Additional info:
* package version(s)
* config and/or log files etc.
* link to upstream bug report, if any

Steps to reproduce:
This task depends upon

Closed by  Sergej Pupykin (sergej)
Monday, 08 May 2023, 20:52 GMT
Reason for closing:  Fixed
Additional comments about closing:  patch applied in opendmarc-1.4.2-3-x86_64.pkg.tar.zst
Comment by Geert Hendrickx (ghen) - Friday, 10 March 2023, 10:53 GMT
FWIW, Debian included this patch a while ago already, so it's well tested by now: https://salsa.debian.org/kitterman/opendmarc/-/blob/debian/master/debian/patches/arcseal-segfaults.patch
(maybe we should take a look at their other patches as well?)

Loading...