[Bug 2023971] Re: [MIR] libmail-dmarc-perl

2024-04-17 Thread Christian Ehrhardt 
Full stack ready, all dependencies seen in component mismatches, FFE approved, MIR approved, only the top level change pulling this in is in -proposed and ready there other than this mismatch -> promoting. Override component to main libmail-dmarc-perl 1.20230215-1ubuntu1 in noble: universe/misc

[Bug 2023971] Re: [MIR] libmail-dmarc-perl

2024-04-17 Thread Christian Ehrhardt 
The list of mismatches in proposed matches the expected set, all of those cases are ready from the MIR and security POV. Furthermore there is a FFE approved for the same context. I've ensured our team subscriptions are complete (they already are) on each of those. After the next run of component

[Bug 2023971] Re: [MIR] libmail-dmarc-perl

2024-04-17 Thread Christian Ehrhardt 
Thanks for also ensuring an FFE. All MIR requested modifications have been implemented, thereby this is now ready to go and seen in component mismatches already. Updating the state. ** Changed in: libmail-dmarc-perl (Ubuntu) Status: Incomplete => Fix Committed -- You received this bug

[Bug 2023971] Re: [MIR] libmail-dmarc-perl

2024-04-16 Thread Miriam España Acebal
FFe granted at https://bugs.launchpad.net/ubuntu/+source/spamassassin/+bug/2061379/comments/1 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2023971 Title: [MIR] libmail-dmarc-perl To manage

[Bug 2023971] Re: [MIR] libmail-dmarc-perl

2024-04-15 Thread Miriam España Acebal
Version of spamassassin using dmarc has been uploaded to [1] . I'm opening a FFe for spamassassin for this. Using the libmail-dmarc-perl package that has been ack to be MIRed that is at [2], we can confirm the installation of both and the packages to finally be promoted (that coincides with the

[Bug 2023971] Re: [MIR] libmail-dmarc-perl

2024-04-09 Thread Lukas Märdian
Setting status back to "Incomplete" as there are still discussions happening and we don't want it to get lost from the MIR report. Also see update in https://github.com/rjbs/Email- MIME/issues/66#issuecomment-2024085120 ** Changed in: libmail-dmarc-perl (Ubuntu) Status: In Progress =>

[Bug 2023971] Re: [MIR] libmail-dmarc-perl

2024-04-09 Thread Miriam España Acebal
Regarding the debate about libmime-tools-perl vs libemail-mime-perl, I checked that libemail-mime-perl is not being used in the last version of spamassassin directly: https://salsa.debian.org/debian/spamassassin/-/blob/master/debian/control?ref_type=heads -- You received this bug notification

[Bug 2023971] Re: [MIR] libmail-dmarc-perl

2024-04-09 Thread Miriam España Acebal
After Miha did the security review, he found that dmarc_receive was failing. It wasn't covered here as dmarc's binary scripts are not used by spamassassin, but I thought it was worth checking. The steps to reproduce (thanks Miha!) were: 1) Create dmarc xml based on google's example 2) Convert

[Bug 2023971] Re: [MIR] libmail-dmarc-perl

2024-04-03 Thread Bryce Harrington
> We have to make a call between duplicated work because of two similar > packages in "main". Or extra work because of carrying non-mainstream > patches... > > Both libemail-mime-perl and libmime-tools-perl are owned by ~ubuntu-server, > so I'd like to get their opinion. From a ~ubuntu-server

[Bug 2023971] Re: [MIR] libmail-dmarc-perl

2024-03-28 Thread Miha Purg
I reviewed libmail-dmarc-perl 1.20230215-1 as checked in noble. This shouldn't be considered a full audit but rather a quick gauge of maintainability. libmail-dmarc-perl is a Perl module implementing DMARC. It can be used by: - MTAs and filtering tools like SpamAssassin to **validate** that

[Bug 2023971] Re: [MIR] libmail-dmarc-perl

2024-03-26 Thread Lukas Märdian
Thanks for the summary, Miriam! We have to make a call between duplicated work because of two similar packages in "main". Or extra work because of carrying non-mainstream patches... Both libemail-mime-perl and libmime-tools-perl are owned by ~ubuntu- server, so I'd like to get their opinion. >

[Bug 2023971] Re: [MIR] libmail-dmarc-perl

2024-03-21 Thread Miriam España Acebal
Hi Miha, First of all, thanks for your work on this Miha. You've summarized it very well and you're right that moving in a different direction than upstream always involves more delicate work in the future. Upstream's discussion is ongoing [1], and we don't know the decision they could make even

[Bug 2023971] Re: [MIR] libmail-dmarc-perl

2024-03-21 Thread Miha Purg
Hi all, During the security review I noticed that several dependencies for this package were replaced with those that already exist in main: - Net::IDN::Encode -> Net::LibIDN [1] - Email::MIME -> MIME::Parser & MIME::Entity [2] To my understanding, this was done to avoid introducing unnecessary