Merge tag 'v9.19.15'

CHANGES

@@ -9,6 +9,8 @@
 6208.	[func]		Return BADCOOKIE for out-of-date or otherwise bad, well
 			formed DNS SERVER COOKIES. [GL #4194]
 
+	--- 9.19.15 released ---
+
 6207.	[cleanup]	The code implementing TSIG/TKEY support has been cleaned
 			up and refactored for improved robustness, readability,
 			and consistency with other code modules. [GL !7828]

bin/tests/system/shutdown/tests_shutdown.py

@@ -162,7 +162,7 @@ def wait_for_proc_termination(proc, max_timeout=10):
 # In both methods named should exit gracefully.
 @pytest.mark.parametrize(
     "kill_method",
-    [pytest.param("rndc", marks=pytest.mark.xfail(reason="GL#4060")), "sigtem"],
+    [pytest.param("rndc", marks=pytest.mark.xfail(reason="GL#4060")), "sigterm"],
 )
 def test_named_shutdown(named_port, control_port, kill_method):
     # pylint: disable-msg=too-many-locals

doc/arm/logging-categories.inc.rst

@@ -62,10 +62,10 @@
 
     The query log entry first reports a client object identifier in @0x<hexadecimal-number> format. Next, it reports the client's IP address and port number, and the query name, class, and type. Next, it reports whether the Recursion Desired flag was set (+ if set, - if not set), whether the query was signed (S), whether EDNS was in use along with the EDNS version number (E(#)), whether TCP was used (T), whether DO (DNSSEC Ok) was set (D), whether CD (Checking Disabled) was set (C), whether a valid DNS Server COOKIE was received (V), and whether a DNS COOKIE option without a valid Server COOKIE was present (K). After this, the destination address the query was sent to is reported. Finally, if any CLIENT-SUBNET option was present in the client query, it is included in square brackets in the format [ECS address/source/scope].
 
-    ``client 127.0.0.1#62536 (www.example.com):``
-    ``query: www.example.com IN AAAA +SE``
-    ``client ::1#62537 (www.example.net):``
-    ``query: www.example.net IN AAAA -SE``
+    .. code-block:: none
+
+       client @0x7f91b8005490 127.0.0.1#62536 (www.example.com): query: www.example.com IN AAAA +E(0)K (127.0.0.1)
+       client @0x7f91b4007400 ::1#62537 (www.example.net): query: www.example.net IN AAAA +E(0)K (::1)
 
     The first part of this log message, showing the client address/port number and query name, is repeated in all subsequent log messages related to the same query.
 

doc/arm/notes.rst

@@ -39,6 +39,7 @@ information about each release, and source code.
 .. include:: ../notes/notes-known-issues.rst
 
 .. include:: ../notes/notes-current.rst
+.. include:: ../notes/notes-9.19.15.rst
 .. include:: ../notes/notes-9.19.14.rst
 .. include:: ../notes/notes-9.19.13.rst
 .. include:: ../notes/notes-9.19.12.rst

doc/notes/notes-9.19.15.rst

@@ -0,0 +1,38 @@
+.. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
+..
+.. SPDX-License-Identifier: MPL-2.0
+..
+.. This Source Code Form is subject to the terms of the Mozilla Public
+.. License, v. 2.0.  If a copy of the MPL was not distributed with this
+.. file, you can obtain one at https://mozilla.org/MPL/2.0/.
+..
+.. See the COPYRIGHT file distributed with this work for additional
+.. information regarding copyright ownership.
+
+Notes for BIND 9.19.15
+----------------------
+
+Feature Changes
+~~~~~~~~~~~~~~~
+
+- The ``relaxed`` QNAME minimization mode now uses NS records. This
+  reduces the number of queries :iscman:`named` makes when resolving, as
+  it allows the non-existence of NS RRsets at non-referral nodes to be
+  cached in addition to the normally cached referrals. :gl:`#3325`
+
+Bug Fixes
+~~~~~~~~~
+
+- The ability to read HMAC-MD5 key files, which was accidentally lost in
+  BIND 9.19.6 and BIND 9.18.8, has been restored. :gl:`#3668`
+  :gl:`#4154`
+
+- Several minor stability issues with the catalog zone implementation
+  have been fixed. :gl:`#4132` :gl:`#4136` :gl:`#4171`
+
+Known Issues
+~~~~~~~~~~~~
+
+- There are no new known issues with this release. See :ref:`above
+  <relnotes_known_issues>` for a list of all known issues affecting this
+  BIND 9 branch.