[opendmarc-users] unverified - OpenDMARC Bug

[A. Schulze]

Hello,

Golem, a german online IT magazin, reported about a Bug in OpenDMARC.
https://www.golem.de/news/opendmarc-aktiv-ausgenutzte-dmarc-sicherheitsluecke-ohne-fix-1909-143798.html

Protonmail found that bug actively used
https://protonmail.com/blog/bellingcat-cyberattack-phishing/

Also there is a proposed fix available as pull request on GitHub
https://github.com/trusteddomainproject/OpenDMARC/pull/48

This message is intended only to relay that info unfiltered to the list.

Andreas