Pullup ticket #3800 - requested by taca
net/bind96: security update

Revisions pulled up:
- net/bind96/Makefile                                          1.25
- net/bind96/distinfo                                          1.17
- net/bind96/patches/patch-lib_dns_resolver.c                  deleted

---
  Module Name: pkgsrc
  Committed By: taca
  Date: Tue May 22 03:34:32 UTC 2012

  Modified Files:
  pkgsrc/net/bind96: Makefile distinfo
  Removed Files:
  pkgsrc/net/bind96/patches: patch-lib_dns_resolver.c

  Log Message:
  Update bind96 package to 9.6.3.1.ESV.7 (BIND 9.6-ESV-R7).

  New Features

  *  None

  Feature Changes

  *  BIND now recognizes the TLSA resource record type, created to
      support IETF DANE (DNS-based Authentication of Named Entities)
      [RT #28989]

  Bug Fixes

  *  The locking strategy around the handling of iterative queries
      has been tuned to reduce unnecessary contention in a multi-threaded
      environment.  (Note that this may not provide a measurable
      improvement over previous versions of BIND, but it corrects the
      performance impact of change 3309 / RT #27995) [RT #29239]

  *  Addresses a race condition that can cause named to to crash when
      the masters list for a zone is updated via rndc reload/reconfig
      [RT #26732]

  *  Fixes a race condition in zone.c that can cause named to crash
      during the processing of rndc delzone [RT #29028]

  *  Prevents a named segfault from resolver.c due to procedure
      fctx_finddone() not being thread-safe.  [RT #27995]

  *  Uses hmctx, not mctx when freeing rbtdb->heaps to avoid triggering
      an assertion when flushing cache data. [RT #28571]

  *  Resolves inconsistencies in locating DNSSEC keys where zone names
      contain characters that require special mappings [RT #28600]

  *  A new flag -R  has been added to queryperf for running tests
      using non-recursive queries.  It also now builds correctly on
      MacOS version 10.7 (darwin)  [RT #28565]

  *  Named no longer crashes if gssapi is enabled in named.conf but
      was not compiled into the binary [RT #28338]

  *  SDB now handles unexpected errors from back-end database drivers
      gracefully instead of exiting on an assert. [RT #28534]

(tron)