Issues

• Request for a new OpenDMARC release

  trusteddomainproject/OpenDMARC#444 · Filter by author mikelolasagasti opened on Sep 28, 2026

• [Security] opendmarc_spf_dns.c: memcpy(hbuf, domain, sizeof hbuf) copies 256 bytes from a variable-length domain - OOB read up to ~243 bytes (ASan-verified, file byte-identical on develop)

  trusteddomainproject/OpenDMARC#443 · Filter by author afldl opened on Aug 24, 2026

• [Security] Stack buffer overflow in ares_parse(): n++ no MAXARESULTS(16) bound, Authentication-Results with >16 results (opendmarc-ar.c:455)

  trusteddomainproject/OpenDMARC#441 · Filter by author afldl opened on Jul 31, 2026
  2

• Live test zones should be self-hostable, not dependent on a maintainer's personal domain

  trusteddomainproject/OpenDMARC#432 · Filter by author thegushi opened on Jun 22, 2026
  1

• filter tests lack documentation outside the scripts themselves

  trusteddomainproject/OpenDMARC#414 · Filter by author thegushi opened on Jun 6, 2026
  1

• filter tests depend on live DNS records we don't control

  trusteddomainproject/OpenDMARC#413 · Filter by author thegushi opened on Jun 6, 2026
  1

• error: use of undeclared identifier 'opendmarc_policy_fetch_fo' in opendmarc.c

  needs-testing
  trusteddomainproject/OpenDMARC#407 · Filter by author smwardle opened on Jun 6, 2026
  6

• DMARCbis compliance gap analysis (RFC 9989 / 9990 / 9991 vs RFC 7489)

  DMARCbis
  trusteddomainproject/OpenDMARC#371 · Filter by author thegushi opened on May 27, 2026
  3

• SPF implementation compliance matrix: internal vs libspf2 vs RFC 7208

  spf-question
  trusteddomainproject/OpenDMARC#370 · Filter by author thegushi opened on May 27, 2026

• DMARCbis: remove pct sampling, add t tag support (RFC 9989)

  trusteddomainproject/OpenDMARC#366 · Filter by author thegushi opened on May 27, 2026

• Make libspf2 a hard dependency; remove internal SPF implementation

  spf-question
  trusteddomainproject/OpenDMARC#304 · Filter by author thegushi opened on May 12, 2026
  12

• PostgreSQL support for reporting

  reporting
  trusteddomainproject/OpenDMARC#246 · Filter by author r10r opened on Sep 13, 2023
  17

• SQLite support for reporting

  reporting
  trusteddomainproject/OpenDMARC#185 · Filter by author ghost opened on Aug 25, 2021
  5

• opendmarc_spf qualifier evaluation missing/incorrect

  spf-question
  trusteddomainproject/OpenDMARC#169 · Filter by author sp-andwei opened on May 12, 2021
  1