- -------------------------------------------------------------------------
Debian Security Advisory DSA-5441-1                   security@debian.org
https://www.debian.org/security/                                  Aron Xu
June 29, 2023                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : maradns
CVE ID         : CVE-2022-30256 CVE-2023-31137
Debian Bug     : 1033252 1035936

Brief introduction 

Two vulnerbilities were found in maradns, an open source domain name
system (DNS) implementation, that may lead to denial of service and
unintended domain name resolution.

For the oldstable distribution (bullseye), these problems have been fixed
in version 2.0.13-1.4+deb11u1.

We recommend that you upgrade your maradns packages.

For the detailed security status of maradns please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/maradns

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org