update to BIND 9.10.3P3

- Fixed a regression in resolver.c:possibly_mark() which caused
known-bogus servers to be queried anyway. [RT #41321]

- render_ecs errors were mishandled when printing out a OPT record
resulting in a assertion failure. (CVE-2015-8705) [RT #41397]

- Specific APL data could trigger a INSIST. (CVE-2015-8704) [RT #41396]

net/isc-bind/Makefile

@@ -1,9 +1,8 @@
-# $OpenBSD: Makefile,v 1.52 2015/12/17 17:07:41 sthen Exp $
+# $OpenBSD: Makefile,v 1.53 2016/01/19 22:24:05 sthen Exp $
 
 COMMENT=	Berkeley Internet Name Daemon: DNS server and tools
 
-V=		9.10.3-P2
-REVISION=	0
+V=		9.10.3-P3
 DISTNAME=	bind-$V
 PKGNAME=	isc-bind-${V:S/-P/pl/}
 

net/isc-bind/distinfo

@@ -1,2 +1,2 @@
-SHA256 (bind-9.10.3-P2.tar.gz) = SmwZEawNS2vmNbY940KbbBaOokQEPxK7yKTrM2j9bs0=
-SIZE (bind-9.10.3-P2.tar.gz) = 8523719
+SHA256 (bind-9.10.3-P3.tar.gz) = aQgQ0fu3KvpinnRjjRnNROKNKy5etj9VxwWthdGky4M=
+SIZE (bind-9.10.3-P3.tar.gz) = 8527540