Update net/bind96 to 9.6.1pl3 (9.6.1-P3).

	--- 9.6.1-P3 released ---

2831.	[security]	Do not attempt to validate or cache
			out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]

2828.	[security]	Cached CNAME or DNAME RR could be returned to clients
			without DNSSEC validation. [RT #20737]

2827.	[security]	Bogus NXDOMAIN could be cached as if valid. [RT #20712]

3 files changed, 37 insertions, 51 deletions

diff --git a/net/bind96/Makefile b/net/bind96/Makefile
index e71353f5301..5fb42339421 100644
--- a/net/bind96/Makefile
+++ b/net/bind96/Makefile
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.13 2010/01/17 12:02:30 wiz Exp $
+# $NetBSD: Makefile,v 1.14 2010/01/20 01:01:15 taca Exp $
 
 DISTNAME=	bind-${BIND_VERSION}
-PKGNAME=	${DISTNAME:S/-P2/pl2/}
-PKGREVISION=	2
+PKGNAME=	${DISTNAME:S/-P/pl/}
 CATEGORIES=	net
 MASTER_SITES=	ftp://ftp.isc.org/isc/bind9/${BIND_VERSION}/ \
 		http://ftp.belnet.be/pub/mirror/ftp.isc.org/isc/bind9/${BIND_VERSION}/
@@ -17,7 +16,7 @@ PKG_DESTDIR_SUPPORT=	user-destdir
 
 MAKE_JOBS_SAFE=	no
 
-BIND_VERSION=	9.6.1-P2
+BIND_VERSION=	9.6.1-P3
 
 .include "../../mk/bsd.prefs.mk"
 
diff --git a/net/bind96/PLIST b/net/bind96/PLIST
index 4e0442b33c7..9871e34930f 100644
--- a/net/bind96/PLIST
+++ b/net/bind96/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.4 2009/09/13 01:44:26 taca Exp $
+@comment $NetBSD: PLIST,v 1.5 2010/01/20 01:01:15 taca Exp $
 bin/dig
 bin/host
 bin/isc-config.sh
@@ -335,54 +335,24 @@ share/doc/bind9/arm/man.nsupdate.html
 share/doc/bind9/arm/man.rndc-confgen.html
 share/doc/bind9/arm/man.rndc.conf.html
 share/doc/bind9/arm/man.rndc.html
-share/doc/bind9/draft/draft-baba-dnsext-acl-reqts-01.txt
-share/doc/bind9/draft/draft-daigle-napstr-04.txt
-share/doc/bind9/draft/draft-danisch-dns-rr-smtp-03.txt
-share/doc/bind9/draft/draft-dnsext-opcode-discover-02.txt
-share/doc/bind9/draft/draft-durand-dnsop-dynreverse-00.txt
-share/doc/bind9/draft/draft-ietf-dnsext-2929bis-01.txt
-share/doc/bind9/draft/draft-ietf-dnsext-axfr-clarify-09.txt
-share/doc/bind9/draft/draft-ietf-dnsext-dns-name-p-s-00.txt
-share/doc/bind9/draft/draft-ietf-dnsext-dnssec-2535typecode-change-06.txt
-share/doc/bind9/draft/draft-ietf-dnsext-dnssec-bis-updates-01.txt
-share/doc/bind9/draft/draft-ietf-dnsext-dnssec-experiments-03.txt
-share/doc/bind9/draft/draft-ietf-dnsext-dnssec-online-signing-02.txt
-share/doc/bind9/draft/draft-ietf-dnsext-dnssec-opt-in-07.txt
-share/doc/bind9/draft/draft-ietf-dnsext-dnssec-rsasha256-06.txt
-share/doc/bind9/draft/draft-ietf-dnsext-dnssec-trans-02.txt
-share/doc/bind9/draft/draft-ietf-dnsext-ds-sha256-05.txt
+share/doc/bind9/draft/draft-ietf-6man-text-addr-representation-01.txt
+share/doc/bind9/draft/draft-ietf-behave-dns64-01.txt
+share/doc/bind9/draft/draft-ietf-dnsext-axfr-clarify-12.txt
+share/doc/bind9/draft/draft-ietf-dnsext-dns-tcp-requirements-01.txt
+share/doc/bind9/draft/draft-ietf-dnsext-dnssec-bis-updates-09.txt
+share/doc/bind9/draft/draft-ietf-dnsext-dnssec-gost-05.txt
 share/doc/bind9/draft/draft-ietf-dnsext-ecc-key-07.txt
-share/doc/bind9/draft/draft-ietf-dnsext-forgery-resilience-02.txt
 share/doc/bind9/draft/draft-ietf-dnsext-interop3597-02.txt
-share/doc/bind9/draft/draft-ietf-dnsext-keyrr-key-signing-flag-12.txt
-share/doc/bind9/draft/draft-ietf-dnsext-mdns-46.txt
-share/doc/bind9/draft/draft-ietf-dnsext-nsid-01.txt
-share/doc/bind9/draft/draft-ietf-dnsext-rfc2536bis-dsa-07.txt
-share/doc/bind9/draft/draft-ietf-dnsext-rfc2539bis-dhk-07.txt
-share/doc/bind9/draft/draft-ietf-dnsext-rfc2671bis-edns0-01.txt
-share/doc/bind9/draft/draft-ietf-dnsext-rfc2672bis-dname-13.txt
-share/doc/bind9/draft/draft-ietf-dnsext-signed-nonexistence-requirements-01.txt
-share/doc/bind9/draft/draft-ietf-dnsext-tkey-renewal-mode-05.txt
-share/doc/bind9/draft/draft-ietf-dnsext-trustupdate-threshold-00.txt
-share/doc/bind9/draft/draft-ietf-dnsext-trustupdate-timers-05.txt
-share/doc/bind9/draft/draft-ietf-dnsext-tsig-sha-06.txt
-share/doc/bind9/draft/draft-ietf-dnsext-wcard-clarify-10.txt
+share/doc/bind9/draft/draft-ietf-dnsext-rfc2671bis-edns0-02.txt
+share/doc/bind9/draft/draft-ietf-dnsext-rfc2672bis-dname-18.txt
+share/doc/bind9/draft/draft-ietf-dnsext-rfc3597-bis-00.txt
+share/doc/bind9/draft/draft-ietf-dnsext-tsig-md5-deprecated-03.txt
 share/doc/bind9/draft/draft-ietf-dnsop-bad-dns-res-05.txt
-share/doc/bind9/draft/draft-ietf-dnsop-default-local-zones-05.txt
+share/doc/bind9/draft/draft-ietf-dnsop-default-local-zones-09.txt
 share/doc/bind9/draft/draft-ietf-dnsop-inaddr-required-07.txt
-share/doc/bind9/draft/draft-ietf-dnsop-ipv6-dns-configuration-06.txt
-share/doc/bind9/draft/draft-ietf-dnsop-ipv6-dns-issues-11.txt
-share/doc/bind9/draft/draft-ietf-dnsop-ipv6-transport-guidelines-01.txt
-share/doc/bind9/draft/draft-ietf-dnsop-key-rollover-requirements-02.txt
-share/doc/bind9/draft/draft-ietf-dnsop-name-server-management-reqs-01.txt
+share/doc/bind9/draft/draft-ietf-dnsop-name-server-management-reqs-02.txt
 share/doc/bind9/draft/draft-ietf-dnsop-respsize-06.txt
-share/doc/bind9/draft/draft-ietf-dnsop-serverid-06.txt
-share/doc/bind9/draft/draft-ietf-enum-e164-gstn-np-05.txt
-share/doc/bind9/draft/draft-ietf-ipv6-node-requirements-08.txt
-share/doc/bind9/draft/draft-ietf-secsh-dns-05.txt
-share/doc/bind9/draft/draft-ihren-dnsext-threshold-validation-00.txt
 share/doc/bind9/draft/draft-kato-dnsop-local-zones-00.txt
-share/doc/bind9/draft/draft-park-ipv6-extensions-dns-pnp-00.txt
 share/doc/bind9/rfc/rfc1032.txt
 share/doc/bind9/rfc/rfc1033.txt
 share/doc/bind9/rfc/rfc1034.txt
@@ -403,6 +373,7 @@ share/doc/bind9/rfc/rfc1712.txt
 share/doc/bind9/rfc/rfc1750.txt
 share/doc/bind9/rfc/rfc1876.txt
 share/doc/bind9/rfc/rfc1886.txt
+share/doc/bind9/rfc/rfc1912.txt
 share/doc/bind9/rfc/rfc1982.txt
 share/doc/bind9/rfc/rfc1995.txt
 share/doc/bind9/rfc/rfc1996.txt
@@ -468,6 +439,7 @@ share/doc/bind9/rfc/rfc3597.txt
 share/doc/bind9/rfc/rfc3645.txt
 share/doc/bind9/rfc/rfc3655.txt
 share/doc/bind9/rfc/rfc3658.txt
+share/doc/bind9/rfc/rfc3755.txt
 share/doc/bind9/rfc/rfc3757.txt
 share/doc/bind9/rfc/rfc3833.txt
 share/doc/bind9/rfc/rfc3845.txt
@@ -480,19 +452,34 @@ share/doc/bind9/rfc/rfc4074.txt
 share/doc/bind9/rfc/rfc4159.txt
 share/doc/bind9/rfc/rfc4193.txt
 share/doc/bind9/rfc/rfc4255.txt
+share/doc/bind9/rfc/rfc4294.txt
+share/doc/bind9/rfc/rfc4339.txt
 share/doc/bind9/rfc/rfc4343.txt
 share/doc/bind9/rfc/rfc4367.txt
 share/doc/bind9/rfc/rfc4398.txt
 share/doc/bind9/rfc/rfc4408.txt
 share/doc/bind9/rfc/rfc4431.txt
 share/doc/bind9/rfc/rfc4470.txt
+share/doc/bind9/rfc/rfc4471.txt
+share/doc/bind9/rfc/rfc4472.txt
+share/doc/bind9/rfc/rfc4509.txt
 share/doc/bind9/rfc/rfc4634.txt
+share/doc/bind9/rfc/rfc4635.txt
 share/doc/bind9/rfc/rfc4641.txt
 share/doc/bind9/rfc/rfc4648.txt
+share/doc/bind9/rfc/rfc4697.txt
 share/doc/bind9/rfc/rfc4701.txt
+share/doc/bind9/rfc/rfc4892.txt
+share/doc/bind9/rfc/rfc4955.txt
+share/doc/bind9/rfc/rfc4956.txt
+share/doc/bind9/rfc/rfc5001.txt
+share/doc/bind9/rfc/rfc5011.txt
 share/doc/bind9/rfc/rfc5155.txt
 share/doc/bind9/rfc/rfc5205.txt
+share/doc/bind9/rfc/rfc5452.txt
 share/doc/bind9/rfc/rfc5507.txt
+share/doc/bind9/rfc/rfc5625.txt
+share/doc/bind9/rfc/rfc5702.txt
 share/doc/bind9/rfc/rfc952.txt
 share/examples/rc.d/lwresd
 share/examples/rc.d/named9
diff --git a/net/bind96/distinfo b/net/bind96/distinfo
index 8608efba611..ef4b827a3f5 100644
--- a/net/bind96/distinfo
+++ b/net/bind96/distinfo
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.7 2009/11/25 22:15:25 joerg Exp $
+$NetBSD: distinfo,v 1.8 2010/01/20 01:01:15 taca Exp $
 
-SHA1 (bind-9.6.1-P2.tar.gz) = 0169c7898790b72ee3b5a1e090c2bdf68792b952
-RMD160 (bind-9.6.1-P2.tar.gz) = 7842404116ec75cd11a73276e9d534bd9ff8c171
-Size (bind-9.6.1-P2.tar.gz) = 6601674 bytes
+SHA1 (bind-9.6.1-P3.tar.gz) = 9cb2bfb933083ab4e85aa884ca0dff7b0ae5cfb2
+RMD160 (bind-9.6.1-P3.tar.gz) = ff444f39d7cf9673497e43c18c40dd77af121851
+Size (bind-9.6.1-P3.tar.gz) = 6508797 bytes
 SHA1 (patch-ab) = 6cec876c8caa7082f97365863f3f88c4f168da48
 SHA1 (patch-ac) = 074649e1514870a3154c623a5f6d1507b72b5b05
 SHA1 (patch-ad) = fe651b18361f28c3cf8b4a9e72f85135f8e8f12b