Improper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1.5.2) allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay. External References: https://www.knot-resolver.cz/2018-01-22-knot-resolver-1.5.2.html
Created knot-resolver tracking bugs for this issue: Affects: epel-all [bug 1537465] Affects: fedora-all [bug 1537466]