For reference, this is the post where the vulnerability was first announced. Several measures to fix this bug have been discussed, and I expect that, along with the final ENSv2 plans, a fix will be implemented.