Bug#1039489: domains in i field and d field are compared as case sensitive

Sven Bartscher kritzefitz at debian.org
Mon Jun 26 16:05:19 BST 2023


Package: libmail-dkim-perl
Version: 0.54-1
Severity: important
Control: fixed -1 0.58-1
Control: forwarded -1 https://rt.cpan.org/Public/Bug/Display.html?id=130713

Hi,

There's a bug that has been reported upstream at 
https://rt.cpan.org/Public/Bug/Display.html?id=130713 and affects the 
package version currently in Buster. The bug has been fixed upstream in 
0.58, so no Debian releases after Buster are affected.

The bug can be reproduced by running the attached test scripts on the 
attached email file on a buster system:

$ perl ./test.pl < broken.eml
invalid (public key: does not support signing subdomains)

Note that the test email includes an i= tag with partially capitalized 
spelling and that the domain's DKIM record specifies t=s:

$ dig +short default._domainkey.weltraumschlangen.de TXT
"v=DKIM1;t=s;[...]

I would like to fix this issue in an LTS update to Buster. Is it alright 
for you, the package maintainer, if I go ahead and prepare an LTS for 
Buster? Are there any other considerations you would like me to take 
into account?

Regards
Sven
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20230626/6d6110be/attachment.sig>


More information about the pkg-perl-maintainers mailing list