Is ldns vulnerable? Did OpenBSD drop BIND and libresolv in favor of ldns and nsd, unbound, drill? Might be an interim solution.