After nearly five months, there is a patch for
CVE-2012-1911. The patch has a big "this has seen very little testing.
Use at your own risk!" disclaimer, but at least some effort is finally
being done by the DjbDNS community to fix this security problem.