This update for bind fixes the following security issue:
A defect in BIND's handling of responses containing a DNAME answer had the
potential to trigger assertion errors in the server remotely, thereby
facilitating a denial-of-service attack. (CVE-2016-8864, bsc#1007829).