Packages / Debian 12 (Bookworm) / Source / mail / opendmarc

Source Package: opendmarc (1.4.2-2+b1)

Domain-based Message Authentication, Reporting and Conformance (DMARC) milter

The following binary packages are built from this source package:

opendmarc
Domain-based Message Authentication, Reporting and Conformance (DMARC) milter
libopendmarc2
DMARC policy library
libopendmarc-dev
DMARC policy library (development files)

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE	Severity	Version impact
[CVE-2026-101281] Published: Sep 29, 2026, 12:45:11 AM UTC A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_sp2_find_mailfrom_domain of the file libopendmarc/opendmarc_spf.c of the	High(7.3)	Affected Details (6) `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12
[CVE-2026-101280] Published: Sep 29, 2026, 12:30:15 AM UTC A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the function opendmarc_policy_query_dmarc of the component Multi-Record Set Handler. The manipulation results	High(7.3)	Affected Details (6) `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12
[CVE-2026-101279] Published: Sep 29, 2026, 12:15:09 AM UTC A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarc_policy.c of the component DMARC Parser.	Medium(6.5)	Affected Details (6) `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12
[CVE-2026-101278] Published: Sep 29, 2026, 12:00:12 AM UTC A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarc_get_tld of the file libopendmarc/opendmarc_tld.c : of the component PSL Wildcard Han	Medium(4.3)	Affected Details (6) `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12
[CVE-2026-101017] Published: Sep 28, 2026, 9:00:10 AM UTC A vulnerability was found in Trusted Domain Project OpenDMARC up to 1.4.2. This vulnerability affects the function strcasecmp in the library libopendmarc/opendmarc_policy.c. The manipulation results i	Medium(6.5)	Affected Details (6) `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12
[CVE-2026-101016] Published: Sep 28, 2026, 8:45:11 AM UTC A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarc_policy_parse_dmarc in the library libopendmarc/opendmarc_policy.c. The manipulation	Medium(6.5)	Affected Details (6) `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12
[CVE-2026-101015] Published: Sep 28, 2026, 8:30:08 AM UTC A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is some unknown functionality of the file policy.c of the component Domain Handler. Executing a manipulati	High(7.5)	Affected Details (6) `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12
[CVE-2026-101014] Published: Sep 28, 2026, 8:15:13 AM UTC A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_util_cleanup in the library libopendmarc/opendmarc_util.c of the	High(7.5)	Affected Details (6) `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12
[CVE-2026-100891] Published: Sep 28, 2026, 12:15:14 AM UTC A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this issue is the function opendmarc_policy_query_dmarc in the library libopendmarc/opendmarc_policy.c of th	High(7.3)	Affected Details (6) `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12
[CVE-2026-100890] Published: Sep 28, 2026, 12:00:12 AM UTC A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_spf_ipv6_explode in the library libopendmarc/opendmarc_spf.c of the comp	Medium(5.5)	Affected Details (6) `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Affected nvd · opendmarc · debian · bookworm; nvd · opendmarc · debian · 12

Fixed and unaffected versions (5)

CVE	Severity	Version impact
[CVE-2021-34555] Published: Jun 10, 2021, 3:15:09 PM UTC opendmarc: CVE-2021-34555	Medium	Fixed Details (6) `1.4.2-2+b1` · amd64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-6` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-6` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-6` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-6` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-6` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-6` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12
[CVE-2020-12460] Published: Jul 25, 2020, 12:00:00 AM UTC opendmarc: CVE-2020-12460	High(7.3)	Fixed Details (6) `1.4.2-2+b1` · amd64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-3` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-3` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-3` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-3` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-3` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-3` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12
[CVE-2020-12272] Published: Apr 27, 2020, 12:00:00 AM UTC opendmarc: CVE-2020-12272	Medium(5.3)	Fixed Details (6) `1.4.2-2+b1` · amd64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-4` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-4` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-4` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-4` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-4` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-4` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12
[CVE-2019-16378] Published: Sep 17, 2019, 12:00:00 AM UTC opendmarc: CVE-2019-16378	High(7.4)	Fixed Details (6) `1.4.2-2+b1` · amd64 · bookworm Fixed · Fixed: `1.3.2-7` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Fixed · Fixed: `1.3.2-7` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Fixed · Fixed: `1.3.2-7` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Fixed · Fixed: `1.3.2-7` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Fixed · Fixed: `1.3.2-7` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Fixed · Fixed: `1.3.2-7` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12
[CVE-2019-20790] Published: Jan 1, 2019, 12:00:00 AM UTC opendmarc: CVE-2019-20790	Medium	Fixed Details (6) `1.4.2-2+b1` · amd64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-4` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-4` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-4` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-4` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · amd64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-4` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12 `1.4.2-2+b1` · arm64 · bookworm Fixed · Fixed: `1.4.0~beta1+dfsg-4` dsa · opendmarc · debian · bookworm; dsa · opendmarc · debian · 12

Last synced: Oct 28, 2026, 3:52:27 AM UTC

[CVE catalog]

Sources

Debian 12 (Bookworm) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Observed SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Result
match verified
Debian 12 (Bookworm) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Observed SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Result
match verified