From: Michal Nowak <mnowak@isc.org>
Date: Thu, 21 Jul 2022 09:48:25 +0000 (+0200)
Subject: Merge tag 'v9_19_3'
X-Git-Tag: v9.19.4~16
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=fbe864cbea539c8bac66feadaedb71e2af2c7e45;p=thirdparty%2Fbind9.git

Merge tag 'v9_19_3'

BIND 9.19.3
---

fbe864cbea539c8bac66feadaedb71e2af2c7e45
diff --cc CHANGES
index 3beb7165471,2d3d7b7ac27..1c31fcefd3d
--- a/CHANGES
+++ b/CHANGES
@@@ -1,48 -1,5 +1,50 @@@
 +5929.	[func]		The use of the "max-zone-ttl" option in "zone" and
 +			"options" blocks is now deprecated; this should
 +			now be configured as part of "dnssec-policy"
 +			instead. The old option still works in zones
 +			with no "dnssec-policy" configured, but a warning
 +			will be logged when loading configuration. Its
 +			functionality will be removed in a future release.
 +			Using "max-zone-ttl" and "dnssec-policy" in the
 +			same zone is now a fatal error. [GL #2918]
 +
 +5928.	[placeholder]
 +
 +5927.	[bug]		A race was possible in dns_dispatch_connect()
 +			that could trigger an assertion failure if two
 +			threads called it near-simultaneously. [GL #3456]
 +
 +5926.	[func]		Handle transient TCP connect() EADDRINUSE failures
 +			on FreeBSD (and possibly other BSDs) by trying three
 +			times before giving up. [GL #3451]
 +
 +5925.	[bug]		With a forwarder configured for all queries, resolution
 +			failures encountered during DS chasing could trigger
 +			assertion failures due to a logic bug in
 +			resume_dslookup() that caused it to call
 +			dns_resolver_createfetch() with an invalid name.
 +			[GL #3439]
 +
 +5924.	[func]		When it's necessary to use AXFR to respond to an
 +			IXFR request, a message explaining the reason
 +			is now logged at level info. [GL #2683]
 +
 +5923.	[bug]		Fix inheritance for dnssec-policy when checking for
 +			inline-signing. [GL #3438]
 +
 +5922.	[bug]		Forwarding of UPDATE message could fail with the
 +			introduction of netmgr. This has been fixed. [GL #3389]
 +
 +5921.	[test]		Convert system tests to use a default DNSKEY algorithm
 +			where the test is not DNSKEY algorithm specific.
 +			[GL #3440]
 +
 +5920.	[bug]		Don't pass back the current name offset when the
 +			compression is disabled in the non-improving case.
 +			[GL #3423]
 +
+ 	--- 9.19.3 released ---
+ 
  5919.	[func]		The "rndc fetchlimit" command lists name servers
  			and domain names that are being rate-limited by
  			"fetches-per-server" or "fetches-per-zone" limits.
diff --cc doc/arm/notes.rst
index 3474046add5,b1999b73d00..9ad8bd03c4e
--- a/doc/arm/notes.rst
+++ b/doc/arm/notes.rst
@@@ -36,7 -36,7 +36,8 @@@ The latest versions of BIND 9 software 
  https://www.isc.org/download/. There you will find additional
  information about each release, and source code.
  
 +.. include:: ../notes/notes-current.rst
+ .. include:: ../notes/notes-9.19.3.rst
  .. include:: ../notes/notes-9.19.2.rst
  .. include:: ../notes/notes-9.19.1.rst
  .. include:: ../notes/notes-9.19.0.rst