net/bind911: update to 9.11.13

Update bind911 to 9.11.3.  It includes fix for CVS-2019-6477.

--- 9.11.13 released ---

5315. [bug] Apply the inital RRSIG expiration spread fixed
to all dynamically created records in the zone
including NSEC3. Also fix the signature clusters
when the server has been offline for prolonged
period of times. [GL #1256]

5314. [func] Added a new statistics variable "tcp-highwater"
that reports the maximum number of simultaneous TCP
clients BIND has handled while running. [GL #1206]

5313. [bug] The default GeoIP2 database location did not match
the ARM.  'named -V' now reports the default
location. [GL #1301]

5310. [bug] TCP failures were affecting EDNS statistics. [GL #1059]

5309. [bug] "geoip-use-ecs yes;" was not working for GeoIP2.
[GL #1275]

5308. [bug] Don't log DNS_R_UNCHANGED from sync_secure_journal()
at ERROR level in receive_secure_serial(). [GL #1288]

5307. [bug] Fix hang when named-compilezone output is sent to pipe.
Thanks to Tony Finch. [GL !2481]

5306. [security] Set a limit on the number of concurrently served
pipelined TCP queries. (CVE-2019-6477) [GL #1264]

5302. [bug] Fix checking that "dnstap-output" is defined when
"dnstap" is specified in a view. [GL #1281]

5301. [bug] Detect partial prefixes / incomplete IPv4 address in
acls. [GL #1143]

(taca)