It was discovered that malformed DNSSEC records within a DNS zone could result in denial of service against Knot Resolver, a caching, DNSSEC- validating DNS resolver.
https://security-tracker.debian.org/tracker/DSA-5633-1
Continue reading...
https://security-tracker.debian.org/tracker/DSA-5633-1
Continue reading...