Merge tag 'v9.19.17'

diff --cc CHANGES
index 7ae6f8538bb05d0ec167bda6301da7deae141151,4cb9f4cdbd649b6f2a9effe20db75d31ad00792a..6c0ba022b16ded01469af16dd59ec354b5b97c11
--- 1/CHANGES
--- 2/CHANGES
+++ b/CHANGES
@@@ -1,37 -1,9 +1,40 @@@
 +6253. [cleanup]       Remove the support for control channel over Unix
 +                      Domain Sockets. [GL #4311]
 +
 +6252. [test]          Python system tests have to be executed by invoking
 +                      pytest directly. Executing them with the legacy test
 +                      runner is no longer supported. [GL #4250]
 +
 +6251. [bug]           Interating a hashmap could return the same element
 +                      twice. [GL #3422]
 +
 +6250. [bug]           The wrong covered value was being set by
 +                      dns_ncache_current for RRSIG records in the returned
 +                      rdataset structure. This resulted in TYPE0 being
 +                      reported as the covered value of the RRSIG when dumping
 +                      the cache contents. [GL #4314]
 +
 +6249. [cleanup]       Reduce the number of reserved UDP dispatches
 +                      to the number of loops, replace the round-robin
 +                      mechanism in dns_dispatchset_t with dispatches
 +                      pinned to loops, and use lock-free hash tables
 +                      for looking up query IDs and active TCP
 +                      connections. [GL !8304]
 +
 +6248. [func]          Add an option "resolver-use-dns64", which enables
 +                      application of DNS64 rules to server addresses
 +                      when sending recursive queries. This allows
 +                      resolution to be performed via NAT64. [GL #608]
 +
 +6247. [func]          Implement incremental hashing in both isc_siphash
 +                      and isc_hash units. [GL #4306]
 +
+       --- 9.19.17 released ---
+ 
  6246. [placeholder]
  
- 6245. [placeholder]
+ 6245. [security]      Limit the amount of recursion that can be performed
+                       by isccc_cc_fromwire. (CVE-2023-3341) [GL #4152]
  
  6244. [bug]           Adjust log levels on malformed messages to NOTICE when
                        transferring in a zone. [GL #4290]

diff --cc doc/arm/notes.rst
index 2d8a31ee9413bd731535aeb1fc272631c14601d8,90180d97a1b8b435e586e028597e602672e620c2..5eff08bf47a3e86f19c2b6523a273d104796fbcd
--- 1/doc/arm/notes.rst
--- 2/doc/arm/notes.rst
+++ b/doc/arm/notes.rst
@@@ -38,7 -38,7 +38,8 @@@ information about each release, and sou
  
  .. include:: ../notes/notes-known-issues.rst
  
 +.. include:: ../notes/notes-current.rst
+ .. include:: ../notes/notes-9.19.17.rst
  .. include:: ../notes/notes-9.19.16.rst
  .. include:: ../notes/notes-9.19.15.rst
  .. include:: ../notes/notes-9.19.14.rst