I've downloaded and compiled bind 9.6.1-P1 and will install and test it on chlfs2 on Monday. This is needed to fix a known security problem. I'll write up a test plan to install it on all of our DNS master and slave servers.