Multiple vulnerabilities have been discovered in PDNS Recursor, a
resolving name server, which could result in cache poisoning or DNSSEC
validation bypass.


https://security-tracker.debian.org/tracker/DSA-6397-1