Log message:
bind916: fix builds on Solaris derivates

A patch fixing SunOS builds was lost during a recent update, restore
it. (And s/SmartOS/SunOS/ in comment, this doesn't just affect SmartOS,
reproduced and fixed on OmniOS. This package also fails to build on
Linux, but that's another issue entirely.) Addresses PR pkg/56716 from
Russell Hansen.

Log message:
net/bind916: update to 9.16.25

Notes for BIND 9.16.25

Feature Changes

* Overall memory use by named has been optimized and reduced, especially on
  systems with many CPU cores.  The default memory allocator has been
  switched from internal to external.  A new command-line option -M internal
  allows named to be started with the old internal memory allocator.  [GL
  #2398]

Bug Fixes

* On FreeBSD, TCP connections leaked a small amount of heap memory, leading
  to an eventual out-of-memory problem.  This has been fixed.  [GL #3051]

* If signatures created by the ZSK were expired and the ZSK private key was
  offline, the signatures were not replaced.  This behavior has been amended
  to replace the expired signatures with new signatures created using the
  KSK.  [GL #3049]

* Under certain circumstances, the signed version of an inline-signed zone
  could be dumped to disk without the serial number of the unsigned version
  of the zone.  This prevented resynchronization of the zone contents after
  named restarted, if the unsigned zone file was modified while named was
  not running.  This has been fixed.  [GL #3071]

Log message:
Eh, undo PKGREVISION.

Log message:
Upgrade net/bind916 to version 9.16.24.

Upstream changes:

        --- 9.16.24 released ---

5773.   [func]          Change the message when accepting TCP connection has
                        failed to say "Accepting TCP connection failed" and
                        change the log level for ISC_R_NOTCONNECTED, ISC_R_QUOTA
                        and ISC_R_SOFTQUOTA results codes from ERROR to INFO.
                        [GL #2700]

5768.   [bug]           dnssec-dsfromkey failed to omit revoked keys. [GL #853]

5764.   [bug]           dns_sdlz_putrr failed to process some valid resource
                        records. [GL #3021]

5762.   [bug]           Fix a "named" crash related to removing and \ 
restoring a
                        `catalog-zone` entry in the configuration file and
                        running `rndc reconfig`. [GL #1608]

5758.   [bug]           mdig now honors the operating system's preferred
                        ephemeral port range. [GL #2374]

5757.   [test]          Replace sed in nsupdate system test with awk to
                        construct the nsupdate command.  The sed expression
                        was not reliably changing the ttl. [GL #3003]

Log message:
revbump for icu and libffi

Log message:
net/bind916: update to 9.16.23

--- 9.16.23 released ---

5752.	[bug]		Fix an assertion failure caused by missing member zones
			during a reload of a catalog zone. [GL #2308]

5750.	[bug]		Fix a bug when comparing two RSA keys. There was a typo
			which caused the "p" prime factors to not being
			compared. [GL #2972]

5737.	[bug]		Address Coverity warning in lib/dns/dnssec.c.
			[GL #2935]

Log message:
*: Revbump for protobuf-3.19.0

Fix for: Shared object "libprotobuf.so.29" not found

Log message:
net/bind916: update distinfo

Update distinfo with latest digest(1).

Log message:
net/bind916: update to 9.16.22

This release contains security fix.

--- 9.16.22 released ---

5736.	[security]	The "lame-ttl" option is now forcibly set to 0. This
			effectively disables the lame server cache, as it could
			previously be abused by an attacker to significantly
			degrade resolver performance. (CVE-2021-25219)
			[GL #2899]

5724.	[bug]		Address a potential deadlock when checking zone content
			consistency. [GL #2908]

5723.	[bug]		Change 5709 broke backward compatibility for the
			"check-names master ..." and "check-names slave ..."
			options. This has been fixed. [GL #2911]

5720.	[contrib]	Old-style DLZ drivers that had to be enabled at
			build-time have been marked as deprecated. [GL #2814]

5719.	[func]		The "map" zone file format has been marked as
			deprecated. [GL #2882]

5717.	[func]		The "cache-file" option, which was documented as "for
			testing purposes only" and not to be used, has been
			removed. [GL #2903]

5716.	[bug]		Multiple library names were mistakenly passed to the
			krb5-config utility when ./configure was invoked with
			the --with-gssapi=[/path/to/]krb5-config option. This
			has been fixed by invoking krb5-config separately for
			each required library. [GL #2866]

5715.	[func]		Add a check for ports specified in "*-source(-v6)"
			options clashing with a global listening port. Such a
			configuration was already unsupported, but it failed
			silently; it is now treated as an error. [GL #2888]

5714.	[bug]		Remove the "adjust interface" mechanism which was
			responsible for setting up listeners on interfaces when
			the "*-source(-v6)" address and port were the same as
			the "listen-on(-v6)" address and port. Such a
			configuration is no longer supported; under certain
			timing conditions, that mechanism could prevent named
			from listening on some TCP ports. This has been fixed.
			[GL #2852]

5712.	[doc]		Add deprecation notice about removing native PKCS#11
			support in the next major BIND 9 release. [GL #2691]

Log message:
net: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and
SHA512 hashes

Not committed (merge conflicts...):

net/radsecproxy/distinfo

The following distfiles could not be fetched (fetched conditionally?):

./net/citrix_ica/distinfo citrix_ica-10.6.115659/en.linuxx86.tar.gz
./net/djbdns/distinfo dnscache-1.05-multiple-ip.patch
./net/djbdns/distinfo djbdns-1.05-test28.diff.xz
./net/djbdns/distinfo djbdns-1.05-ignoreip2.patch
./net/djbdns/distinfo djbdns-1.05-multiip.diff
./net/djbdns/distinfo djbdns-cachestats.patch