USN-6356-1: OpenDMARC vulnerabilities

Packages

opendmarc - Open Source implementation of the DMARC specification

Details

Jianjun Chen, Vern Paxson and Jian Jiang discovered that OpenDMARC
incorrectly handled certain inputs. If a user or an automated system were
tricked into receiving crafted inputs, an attacker could possibly use this
to falsify the domain of an e-mails origin. (CVE-2020-12272)

Patrik Lantz discovered that OpenDMARC incorrectly handled certain inputs.
If a user or an automated system were tricked into opening a specially
crafted input file, a remote attacker could possibly use this issue to
cause a denial of service. (CVE-2020-12460)

Jianjun Chen, Vern Paxson and Jian Jiang discovered that OpenDMARC
incorrectly handled certain inputs. If a user or an automated system were
tricked into receiving crafted inputs, an attacker could possibly use this
to falsify the domain of an e-mails origin. (CVE-2020-12272)

Patrik Lantz discovered that OpenDMARC incorrectly handled certain inputs.
If a user or an automated system were tricked into opening a specially
crafted input file, a remote attacker could possibly use this issue to
cause a denial of service. (CVE-2020-12460)

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
20.04 focal	libopendmarc2 – 1.3.2-7ubuntu0.1
20.04 focal	opendmarc – 1.3.2-7ubuntu0.1
18.04 bionic	libopendmarc2 – 1.3.2-3ubuntu0.2
18.04 bionic	opendmarc – 1.3.2-3ubuntu0.2
16.04 xenial	libopendmarc2 – 1.3.1+dfsg-3ubuntu0.1~esm1
16.04 xenial	opendmarc – 1.3.1+dfsg-3ubuntu0.1~esm1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

Packages

Details

Update instructions

Reduce your security exposure

References