Merge tag 'v9_19_3'

BIND 9.19.3

diff --cc CHANGES
index 3beb71654710d3228572cca2895649a6e74682db,2d3d7b7ac27743933b99f618db47e0487720dc75..1c31fcefd3d73cf3efdc531f718013fe4b23af07
--- 1/CHANGES
--- 2/CHANGES
+++ b/CHANGES
@@@ -1,48 -1,5 +1,50 @@@
 +5929. [func]          The use of the "max-zone-ttl" option in "zone" and
 +                      "options" blocks is now deprecated; this should
 +                      now be configured as part of "dnssec-policy"
 +                      instead. The old option still works in zones
 +                      with no "dnssec-policy" configured, but a warning
 +                      will be logged when loading configuration. Its
 +                      functionality will be removed in a future release.
 +                      Using "max-zone-ttl" and "dnssec-policy" in the
 +                      same zone is now a fatal error. [GL #2918]
 +
 +5928. [placeholder]
 +
 +5927. [bug]           A race was possible in dns_dispatch_connect()
 +                      that could trigger an assertion failure if two
 +                      threads called it near-simultaneously. [GL #3456]
 +
 +5926. [func]          Handle transient TCP connect() EADDRINUSE failures
 +                      on FreeBSD (and possibly other BSDs) by trying three
 +                      times before giving up. [GL #3451]
 +
 +5925. [bug]           With a forwarder configured for all queries, resolution
 +                      failures encountered during DS chasing could trigger
 +                      assertion failures due to a logic bug in
 +                      resume_dslookup() that caused it to call
 +                      dns_resolver_createfetch() with an invalid name.
 +                      [GL #3439]
 +
 +5924. [func]          When it's necessary to use AXFR to respond to an
 +                      IXFR request, a message explaining the reason
 +                      is now logged at level info. [GL #2683]
 +
 +5923. [bug]           Fix inheritance for dnssec-policy when checking for
 +                      inline-signing. [GL #3438]
 +
 +5922. [bug]           Forwarding of UPDATE message could fail with the
 +                      introduction of netmgr. This has been fixed. [GL #3389]
 +
 +5921. [test]          Convert system tests to use a default DNSKEY algorithm
 +                      where the test is not DNSKEY algorithm specific.
 +                      [GL #3440]
 +
 +5920. [bug]           Don't pass back the current name offset when the
 +                      compression is disabled in the non-improving case.
 +                      [GL #3423]
 +
+       --- 9.19.3 released ---
+ 
  5919. [func]          The "rndc fetchlimit" command lists name servers
                        and domain names that are being rate-limited by
                        "fetches-per-server" or "fetches-per-zone" limits.

diff --cc doc/arm/notes.rst
index 3474046add57078bb439825866c17716c34b4f2a,b1999b73d00b06836de54a4818ce15cbabc8a3ef..9ad8bd03c4e47c0aadb7d0c0edc6b2ea8d7d9797
--- 1/doc/arm/notes.rst
--- 2/doc/arm/notes.rst
+++ b/doc/arm/notes.rst
@@@ -36,7 -36,7 +36,8 @@@ The latest versions of BIND 9 software 
  https://www.isc.org/download/. There you will find additional
  information about each release, and source code.
  
 +.. include:: ../notes/notes-current.rst
+ .. include:: ../notes/notes-9.19.3.rst
  .. include:: ../notes/notes-9.19.2.rst
  .. include:: ../notes/notes-9.19.1.rst
  .. include:: ../notes/notes-9.19.0.rst