Upstream here again. I have released MaraDNS 3.5.0030 and 3.4.09 with a security update: MaraDNS now fully supports RFC8482, which means MaraDNS no longer supports ANY records. [1] While MaraDNS does not have long packet support, this removes one possible denial of service amplification path.
If someone can not step up to plate to maintain MaraDNS for Debian, we should deprecate and eventually remove the package. I may end up making my own .deb files for MaraDNS. -- Sam On Mon, Nov 21, 2022 at 5:03 AM Moritz Muehlenhoff <j...@debian.org> wrote: > > Source: maradns > Version: 2.0.13-1.4 > Severity: serious > > The last maintainer upload was in 2015 and the version currently in the > archive is way behind current upstream releases (which is at 3.4.07), > we have plenty of maintained DNS servers, keep it out of testing ( > and if noone picks it up, remove it from the archive). >
