Description of problem: Opendmarc crashes with 'milter unix:/run/opendmarc/opendmarc.sock: can't read SMFIC_BODYEOB reply packet header: Application error' [35266.313292] opendmarc[19208]: segfault at 0 ip 0000148cd4fc76d0 sp 0000148cc7dd9138 error 4 in libbsd.so.0.11.3[148cd4fbf000+c000] See solution witch patch for OpenDMARC: https://github.com/trusteddomainproject/OpenDMARC/issues/183 Version-Release number of selected component (if applicable): Name : opendmarc Arch : x86_64 Version : 1.4.1.1 Release : 3.el7 Size : 246 k Repo : installed From repo : epel Summary : A Domain-based Message Authentication, Reporting & Conformance : (DMARC) milter and library URL : http://www.trusteddomain.org/opendmarc.html License : BSD and Sendmail Description : OpenDMARC (Domain-based Message Authentication, Reporting & : Conformance) provides an open source library that implements the : DMARC verification service plus a milter-based filter application : that can plug in to any milter-aware MTA, including sendmail, : Postfix, or any other MTA that supports the milter protocol. : : The DMARC sender authentication system is still a draft standard, : working towards RFC status. : : The database schema required for some functions is provided in : /usr/share/opendmarc/db. The rddmarc tools are provided in : /usr/share/opendmarc/contrib/rddmarc. How reproducible: Get an E-Mail with "ARC-Seal: i=1; none" or DMARC signature wirh more than 2048 bit lenght. Steps to Reproduce: 1. E-Mail with "ARC-Seal: i=1; none" or DMARC signature wirh more than 2048 bit lenght. 2. OpenDMARC under CentOS-7 crashed. 3. [35266.313292] opendmarc[19208]: segfault at 0 ip 0000148cd4fc76d0 sp 0000148cc7dd9138 error 4 in libbsd.so.0.11.3[148cd4fbf000+c000] Actual results: OpenDMARC chrashed with: [35266.313292] opendmarc[19208]: segfault at 0 ip 0000148cd4fc76d0 sp 0000148cc7dd9138 error 4 in libbsd.so.0.11.3[148cd4fbf000+c000] Expected results: OpenDMARC can handel E-Mail with "ARC-Seal: i=1; none" or DMARC signature wirh more than 2048 bit lenght or higher, see patch: https://github.com/trusteddomainproject/OpenDMARC/issues/183 Additional info: Patch avialable: https://github.com/trusteddomainproject/OpenDMARC/issues/183
Please consider applying these patches in Fedora, which have been submitted upstream but have not been accepted. They are really required for using OpenDMARC on an MX host. I created https://copr.fedorainfracloud.org/coprs/abo/opendmarc/ almost a year ago hoping it would be a temporary solution, but it is still needed. Specifically I suggest these patches: https://github.com/trusteddomainproject/OpenDMARC/pull/223 https://github.com/trusteddomainproject/OpenDMARC/pull/224 https://github.com/trusteddomainproject/OpenDMARC/pull/225
EPEL 7 entered end-of-life (EOL) status on 2024-06-30.\n\nEPEL 7 is no longer maintained, which means that it\nwill not receive any further security or bug fix updates.\n As a result we are closing this bug.
This is STILL an issue in EPEL 9 (opendmarc 1.4.2) and is disrupting our ability to run the latest version of opendmarc. Considering that the patch has been available for years, please consider applying it to EPEL 9.
Reopening and moving to epel9
Just ran into the same issue. Can confirm the patches in https://bugzilla.redhat.com/show_bug.cgi?id=2177653#c1 worked around the problem for me.
Thanks for reopening Kevin. I created a PR with the change, will test and merge. This can be later backported to EL releases.
Much appreciated, thank you.
FEDORA-2025-525419f4ed (opendmarc-1.4.2-27.fc43) has been submitted as an update to Fedora 43. https://bodhi.fedoraproject.org/updates/FEDORA-2025-525419f4ed
FEDORA-2025-470dc317c1 (opendmarc-1.4.2-27.fc42) has been submitted as an update to Fedora 42. https://bodhi.fedoraproject.org/updates/FEDORA-2025-470dc317c1
FEDORA-2025-525419f4ed (opendmarc-1.4.2-27.fc43) has been pushed to the Fedora 43 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2025-470dc317c1 has been pushed to the Fedora 42 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-470dc317c1` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-470dc317c1 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-EPEL-2025-07ed33e698 (opendmarc-1.4.2-28.el9) has been submitted as an update to Fedora EPEL 9. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-07ed33e698
FEDORA-EPEL-2025-5c7a765aeb (opendmarc-1.4.2-28.el10_1) has been submitted as an update to Fedora EPEL 10.1. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5c7a765aeb
Update https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-07ed33e698 includes the fix, please test. The update also contains the split of the package as described here: https://fedoraproject.org/wiki/Changes/SplitOpendmarcTools The -tools package requires CRB repo enabled.
FEDORA-2025-341fab382f has been pushed to the Fedora 42 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-341fab382f` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-341fab382f See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-EPEL-2025-5c7a765aeb has been pushed to the Fedora EPEL 10.1 testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5c7a765aeb See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-EPEL-2025-07ed33e698 has been pushed to the Fedora EPEL 9 testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-07ed33e698 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2025-341fab382f (opendmarc-1.4.2-28.fc42) has been pushed to the Fedora 42 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-EPEL-2025-07ed33e698 (opendmarc-1.4.2-28.el9) has been pushed to the Fedora EPEL 9 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-EPEL-2025-5c7a765aeb (opendmarc-1.4.2-28.el10_1) has been pushed to the Fedora EPEL 10.1 stable repository. If problem still persists, please make note of it in this bug report.