HLFH [1] filed a deletion request for trust-dns [2]:

The AUR maintainer is no longer maintaining this package because
trust-dns is no longer maintained upstream as it has been replaced by
hickory-dns. The current version 0.22.0 is vulnerable to remotely
triggered denial-of-service attacks, consuming both network and CPU
resources. https://rustsec.org/advisories/RUSTSEC-2023-0041.html
I do request deletion, so AUR users could install hickory-dns instead
of trust-dns that is no longer maintained (neither in the AUR nor
upstream) and has a security risk. trust-dns-git deletion request was
accepted a few days ago. We also need to delete trust-dns from the
AUR. Thanks.

[1] https://aur.archlinux.org/account/HLFH/
[2] https://aur.archlinux.org/pkgbase/trust-dns/

Reply via email to