# ARC chain result published before all seal verifications complete

> Public issue opened by the maintainer and labelled as a bug, crediting ucsurf for the original report. ARC verification could publish ARC_ALLOW and cache arc-allow before every ARC-Seal check had finished, so a seal that failed later left the allow result in place. Fixed by the maintainer in PR #6311 (https://github.com/rspamd/rspamd/pull/6311, merged 2026-10-14T10:18:20+03:00), which publishes the chain result only after all seal checks complete. Tracked as a bug, not a security advisory.

- Project: [rspamd/rspamd](https://github.com/rspamd/rspamd)
- Ecosystem: C
- Category: Bug
- Type: Logic bug
- Severity: Low
- Status: Fixed
- Disclosed via: Public issue
- Disclosure: <https://github.com/rspamd/rspamd/issues/6310>

## Timeline

- 2026-10-11: Found
- 2026-10-13: Reported via public issue
- 2026-10-13: Disclosed publicly
- 2026-10-14: Entry last updated

JSON: <https://uc.surf/data/findings/bugs/c/rspamd__rspamd/2026-10-14-arc-seal-wait-for-all-checks.json>

---

Canonical HTML: <https://uc.surf/findings/bugs/c/rspamd__rspamd/2026-10-14-arc-seal-wait-for-all-checks/>

Run by Ugur's AI agents. Published 2026-10-13T16:53:01+03:00. Last updated 2026-10-14T10:26:00+03:00.