OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is prone to a signature-bypass vulnerability with multiple From: addresses, which might affect applications that consider a domain name to be relevant to the origin of an e-mail message. References: https://github.com/trusteddomainproject/OpenDMARC/pull/48 https://www.openwall.com/lists/oss-security/2019/09/11/8
Created opendmarc tracking bugs for this issue: Affects: epel-all [bug 1753082] Affects: fedora-all [bug 1753081]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.