Apply by doing:

Apply by doing:
cd /usr/src
patch -p0 < 008_bind.patch

And then rebuild and install bind:
cd usr.sbin/bind
make -f Makefile.bsd-wrapper
make -f Makefile.bsd-wrapper install

Index: usr.sbin/bind/lib/dns/openssldsa_link.c
===================================================================
RCS file: /cvs/src/usr.sbin/bind/lib/dns/openssldsa_link.c,v
retrieving revision 1.1.1.3
diff -u -r1.1.1.3 openssldsa_link.c
--- usr.sbin/bind/lib/dns/openssldsa_link.c 9 Dec 2007 12:34:20 -0000 1.1.1.3
+++ usr.sbin/bind/lib/dns/openssldsa_link.c 11 Jan 2009 02:22:57 -0000
@@ -133,7 +133,7 @@

status = DSA_do_verify(digest, ISC_SHA1_DIGESTLENGTH, dsasig, dsa);
DSA_SIG_free(dsasig);
- if (status == 0)
+ if (status <= 0)
return (dst__openssl_toresult(DST_R_VERIFYFAILURE));

return (ISC_R_SUCCESS);