Merge branch 'prep-release' into v9_11_21-release

CHANGES

@@ -7,6 +7,8 @@
 
 5462.	[bug]		Move LMDB locking from LMDB itself to named. [GL #1976]
 
+	--- 9.11.21 released ---
+
 5458.	[bug]		Prevent a theoretically possible NULL dereference caused
 			by a data race between zone_maintenance() and
 			dns_zone_setview_helper(). [GL #1627]

README

@@ -112,124 +112,124 @@ BIND 9.11 features
 BIND 9.11.0 includes a number of changes from BIND 9.10 and earlier
 releases. New features include:
 
-  * Added support for Catalog Zones, a new method for provisioning
+  • Added support for Catalog Zones, a new method for provisioning
     servers: a list of zones to be served is stored in a DNS zone, along
     with their configuration parameters. Changes to the catalog zone are
     propagated to slaves via normal AXFR/IXFR, whereupon the zones that
     are listed in it are automatically added, deleted or reconfigured.
-  * Added support for "dnstap", a fast and flexible method of capturing
+  • Added support for "dnstap", a fast and flexible method of capturing
     and logging DNS traffic.
-  * Added support for "dyndb", a new API for loading zone data from an
+  • Added support for "dyndb", a new API for loading zone data from an
     external database, developed by Red Hat for the FreeIPA project.
-  * "fetchlimit" quotas are now compiled in by default. These are for the
+  • "fetchlimit" quotas are now compiled in by default. These are for the
     use of recursive resolvers that are are under high query load for
     domains whose authoritative servers are nonresponsive or are
     experiencing a denial of service attack:
-      + fetches-per-server limits the number of simultaneous queries that
+      □ fetches-per-server limits the number of simultaneous queries that
         can be sent to any single authoritative server. The configured
         value is a starting point; it is automatically adjusted downward
         if the server is partially or completely non-responsive. The
         algorithm used to adjust the quota can be configured via the
         "fetch-quota-params" option.
-      + fetches-per-zone limits the number of simultaneous queries that
+      □ fetches-per-zone limits the number of simultaneous queries that
         can be sent for names within a single domain. (Note: Unlike
         fetches-per-server, this value is not self-tuning.)
-      + New stats counters have been added to count queries spilled due to
+      □ New stats counters have been added to count queries spilled due to
         these quotas.
-  * Added a new dnssec-keymgr key maintenance utility, which can generate
+  • Added a new dnssec-keymgr key maintenance utility, which can generate
     or update keys as needed to ensure that a zone's keys match a defined
     DNSSEC policy.
-  * The experimental "SIT" feature in BIND 9.10 has been renamed "COOKIE"
+  • The experimental "SIT" feature in BIND 9.10 has been renamed "COOKIE"
     and is no longer optional. EDNS COOKIE is a mechanism enabling clients
     to detect off-path spoofed responses, and servers to detect
     spoofed-source queries. Clients that identify themselves using COOKIE
     options are not subject to response rate limiting (RRL) and can
     receive larger UDP responses.
-  * SERVFAIL responses can now be cached for a limited time (defaulting to
+  • SERVFAIL responses can now be cached for a limited time (defaulting to
     1 second, with an upper limit of 30). This can reduce the frequency of
     retries when a query is persistently failing.
-  * Added an nsip-wait-recurse switch to RPZ. This causes NSIP rules to be
+  • Added an nsip-wait-recurse switch to RPZ. This causes NSIP rules to be
     skipped if a name server IP address isn't in the cache yet; the
     address will be looked up and the rule will be applied on future
     queries.
-  * Added a Python RNDC module. This allows multiple commands to sent over
+  • Added a Python RNDC module. This allows multiple commands to sent over
     a persistent RNDC channel, which saves time.
-  * The controls block in named.conf can now grant read-only rndc access
+  • The controls block in named.conf can now grant read-only rndc access
     to specified clients or keys. Read-only clients could, for example,
     check rndc status but could not reconfigure or shut down the server.
-  * rndc commands can now return arbitrarily large amounts of text to the
+  • rndc commands can now return arbitrarily large amounts of text to the
     caller.
-  * The zone serial number of a dynamically updatable zone can now be set
+  • The zone serial number of a dynamically updatable zone can now be set
     via rndc signing -serial <number> <zonename>. This allows
     inline-signing zones to be set to a specific serial number.
-  * The new rndc nta command can be used to set a Negative Trust Anchor
+  • The new rndc nta command can be used to set a Negative Trust Anchor
     (NTA), disabling DNSSEC validation for a specific domain; this can be
     used when responses from a domain are known to be failing validation
     due to administrative error rather than because of a spoofing attack.
     Negative trust anchors are strictly temporary; by default they expire
     after one hour, but can be configured to last up to one week.
-  * rndc delzone can now be used on zones that were not originally created
+  • rndc delzone can now be used on zones that were not originally created
     by "rndc addzone".
-  * rndc modzone reconfigures a single zone, without requiring the entire
+  • rndc modzone reconfigures a single zone, without requiring the entire
     server to be reconfigured.
-  * rndc showzone displays the current configuration of a zone.
-  * rndc managed-keys can be used to check the status of RFC 5001 managed
+  • rndc showzone displays the current configuration of a zone.
+  • rndc managed-keys can be used to check the status of RFC 5001 managed
     trust anchors, or to force trust anchors to be refreshed.
-  * max-cache-size can now be set to a percentage of available memory. The
+  • max-cache-size can now be set to a percentage of available memory. The
     default is 90%.
-  * Update forwarding performance has been improved by allowing a single
+  • Update forwarding performance has been improved by allowing a single
     TCP connection to be shared by multiple updates.
-  * The EDNS Client Subnet (ECS) option is now supported for authoritative
+  • The EDNS Client Subnet (ECS) option is now supported for authoritative
     servers; if a query contains an ECS option then ACLs containing geoip
     or ecs elements can match against the the address encoded in the
     option. This can be used to select a view for a query, so that
     different answers can be provided depending on the client network.
-  * The EDNS EXPIRE option has been implemented on the client side,
+  • The EDNS EXPIRE option has been implemented on the client side,
     allowing a slave server to set the expiration timer correctly when
     transferring zone data from another slave server.
-  * The key generation and manipulation tools (dnssec-keygen,
+  • The key generation and manipulation tools (dnssec-keygen,
     dnssec-settime, dnssec-importkey, dnssec-keyfromlabel) now take -Psync
     and -Dsync options to set the publication and deletion times of CDS
     and CDNSKEY parent-synchronization records. Both named and
     dnssec-signzone can now publish and remove these records at the
     scheduled times.
-  * A new minimal-any option reduces the size of UDP responses for query
+  • A new minimal-any option reduces the size of UDP responses for query
     type ANY by returning a single arbitrarily selected RRset instead of
     all RRsets.
-  * A new masterfile-style zone option controls the formatting of text
+  • A new masterfile-style zone option controls the formatting of text
     zone files: When set to full, a zone file is dumped in
     single-line-per-record format.
-  * serial-update-method can now be set to date. On update, the serial
+  • serial-update-method can now be set to date. On update, the serial
     number will be set to the current date in YYYYMMDDNN format.
-  * dnssec-signzone -N date sets the serial number to YYYYMMDDNN.
-  * named -L <filename> causes named to send log messages to the specified
+  • dnssec-signzone -N date sets the serial number to YYYYMMDDNN.
+  • named -L <filename> causes named to send log messages to the specified
     file by default instead of to the system log.
-  * dig +ttlunits prints TTL values with time-unit suffixes: w, d, h, m, s
+  • dig +ttlunits prints TTL values with time-unit suffixes: w, d, h, m, s
     for weeks, days, hours, minutes, and seconds.
-  * dig +unknownformat prints dig output in RFC 3597 "unknown record"
+  • dig +unknownformat prints dig output in RFC 3597 "unknown record"
     presentation format.
-  * dig +ednsopt allows dig to set arbitrary EDNS options on requests.
-  * dig +ednsflags allows dig to set yet-to-be-defined EDNS flags on
+  • dig +ednsopt allows dig to set arbitrary EDNS options on requests.
+  • dig +ednsflags allows dig to set yet-to-be-defined EDNS flags on
     requests.
-  * mdig is an alternate version of dig which sends multiple pipelined TCP
+  • mdig is an alternate version of dig which sends multiple pipelined TCP
     queries to a server. Instead of waiting for a response after sending a
     query, it sends all queries immediately and displays responses in the
     order received.
-  * serial-query-rate no longer controls NOTIFY messages. These are
+  • serial-query-rate no longer controls NOTIFY messages. These are
     separately controlled by notify-rate and startup-notify-rate.
-  * nsupdate now performs check-names processing by default on records to
+  • nsupdate now performs check-names processing by default on records to
     be added. This can be disabled with check-names no.
-  * The statistics channel now supports DEFLATE compression, reducing the
+  • The statistics channel now supports DEFLATE compression, reducing the
     size of the data sent over the network when querying statistics.
-  * New counters have been added to the statistics channel to track the
+  • New counters have been added to the statistics channel to track the
     sizes of incoming queries and outgoing responses in histogram buckets,
     as specified in RSSAC002.
-  * A new NXDOMAIN redirect method (option nxdomain-redirect) has been
+  • A new NXDOMAIN redirect method (option nxdomain-redirect) has been
     added, allowing redirection to a specified DNS namespace instead of a
     single redirect zone.
-  * When starting up, named now ensures that no other named process is
+  • When starting up, named now ensures that no other named process is
     already running.
-  * Files created by named to store information, including mkeys and nzf
+  • Files created by named to store information, including mkeys and nzf
     files, are now named after their corresponding views unless the view
     name contains characters incompatible with use as a filename. Old
     style filenames (based on the hash of the view name) will still work.
@@ -266,7 +266,7 @@ BIND 9.11.5
 BIND 9.11.5 is a maintenance release, and also addresses CVE-2018-5741 by
 correcting faulty documentation and introducing the following new feature:
 
-  * New krb5-selfsub and ms-selfsub rule types for update-policy
+  • New krb5-selfsub and ms-selfsub rule types for update-policy
     statements allow updating of subdomains based on a Kerberos or Active
     Directory machine principal.
 
@@ -338,6 +338,10 @@ BIND 9.11.20
 BIND 9.11.20 is a maintenance release, and also addresses the security
 vulnerability disclosed in CVE-2020-8619.
 
+BIND 9.11.21
+
+BIND 9.11.21 is a maintenance release.
+
 Building BIND
 
 Minimally, BIND requires a UNIX or Linux system with an ANSI C compiler,
@@ -438,8 +442,8 @@ least one of the following libraries: libxml2 http://xmlsoft.org or json-c
 https://github.com/json-c/json-c. If these are installed at a nonstandard
 location, then:
 
-  * for libxml2, specify the prefix using --with-libxml2=/prefix,
-  * for json-c, adjust PKG_CONFIG_PATH.
+  • for libxml2, specify the prefix using --with-libxml2=/prefix,
+  • for json-c, adjust PKG_CONFIG_PATH.
 
 To support compression on the HTTP statistics channel, the server must be
 linked against libzlib. If this is installed in a nonstandard location,
@@ -584,7 +588,7 @@ GitLab instance, which is not visible to the public.
 
 Acknowledgments
 
-  * The original development of BIND 9 was underwritten by the following
+  • The original development of BIND 9 was underwritten by the following
     organizations:
 
       Sun Microsystems, Inc.
@@ -599,11 +603,11 @@ Acknowledgments
       Stichting NLnet - NLnet Foundation
       Nominum, Inc.
 
-  * This product includes software developed by the OpenSSL Project for
+  • This product includes software developed by the OpenSSL Project for
     use in the OpenSSL Toolkit. http://www.OpenSSL.org/
 
-  * This product includes cryptographic software written by Eric Young
+  • This product includes cryptographic software written by Eric Young
     (eay@cryptsoft.com)
 
-  * This product includes software written by Tim Hudson
+  • This product includes software written by Tim Hudson
     (tjh@cryptsoft.com)

README.md

@@ -355,6 +355,10 @@ vulnerabilities disclosed in CVE-2020-8616 and CVE-2020-8617.
 BIND 9.11.20 is a maintenance release, and also addresses the security
 vulnerability disclosed in CVE-2020-8619.
 
+#### BIND 9.11.21
+
+BIND 9.11.21 is a maintenance release.
+
 ### <a name="build"/> Building BIND
 
 Minimally, BIND requires a UNIX or Linux system with an ANSI C compiler,

doc/arm/Bv9ARM.ch01.html

@@ -616,6 +616,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/Bv9ARM.ch02.html

@@ -151,6 +151,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/Bv9ARM.ch03.html

@@ -759,6 +759,6 @@ controls {
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/Bv9ARM.ch04.html

@@ -2867,6 +2867,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/Bv9ARM.ch05.html

@@ -142,6 +142,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/Bv9ARM.ch06.html

@@ -14720,6 +14720,6 @@ HOST-127.EXAMPLE. MX 0 .
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/Bv9ARM.ch07.html

@@ -400,6 +400,6 @@ allow-query { !{ !10/8; any; }; key example; };
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/Bv9ARM.ch08.html

@@ -136,6 +136,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/Bv9ARM.ch09.html

@@ -36,11 +36,12 @@
 <div class="toc">
 <p><b>Table of Contents</b></p>
 <dl class="toc">
-<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.20</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.21</a></span></dt>
 <dd><dl>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_license">License Change</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes-9.11.21">Notes for BIND 9.11.21</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes-9.11.20">Notes for BIND 9.11.20</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes-9.11.19">Notes for BIND 9.11.19</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes-9.11.18">Notes for BIND 9.11.18</a></span></dt>
@@ -69,7 +70,7 @@
 </div>
       <div class="section">
 <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id-1.10.2"></a>Release Notes for BIND Version 9.11.20</h2></div></div></div>
+<a name="id-1.10.2"></a>Release Notes for BIND Version 9.11.21</h2></div></div></div>
   
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
@@ -127,6 +128,40 @@
 
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
+<a name="relnotes-9.11.21"></a>Notes for BIND 9.11.21</h3></div></div></div>
+
+  <div class="section">
+<div class="titlepage"><div><div><h4 class="title">
+<a name="relnotes-9.11.21-bugs"></a>Bug Fixes</h4></div></div></div>
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
+        <p>
+          <span class="command"><strong>named</strong></span> could crash when cleaning dead nodes in
+          <code class="filename">lib/dns/rbtdb.c</code> that were being reused.
+          [GL #1968]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          Properly handle missing <span class="command"><strong>kyua</strong></span> command so that
+          <span class="command"><strong>make check</strong></span> does not fail unexpectedly when CMocka
+          is installed, but Kyua is not. [GL #1950]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          The validator could fail to accept a properly signed RRset if an
+          unsupported algorithm appeared earlier in the DNSKEY RRset than a
+          supported algorithm. It could also stop if it detected a malformed
+          public key. [GL #1689]
+        </p>
+      </li>
+</ul></div>
+  </div>
+
+</div>
+  <div class="section">
+<div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes-9.11.20"></a>Notes for BIND 9.11.20</h3></div></div></div>
 
   <div class="section">
@@ -2257,6 +2292,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/Bv9ARM.ch10.html

@@ -148,6 +148,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/Bv9ARM.ch11.html

@@ -935,6 +935,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/Bv9ARM.ch12.html

@@ -533,6 +533,6 @@ $ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mm
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/Bv9ARM.ch13.html

@@ -213,6 +213,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/Bv9ARM.html

@@ -32,7 +32,7 @@
 <div>
 <div><h1 class="title">
 <a name="id-1"></a>BIND 9 Administrator Reference Manual</h1></div>
-<div><p class="releaseinfo">BIND Version 9.11.20</p></div>
+<div><p class="releaseinfo">BIND Version 9.11.21</p></div>
 <div><p class="copyright">Copyright  2000-2020 Internet Systems Consortium, Inc. ("ISC")</p></div>
 </div>
 <hr>
@@ -241,11 +241,12 @@
 </dl></dd>
 <dt><span class="appendix"><a href="Bv9ARM.ch09.html">A. Release Notes</a></span></dt>
 <dd><dl>
-<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.20</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.21</a></span></dt>
 <dd><dl>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_license">License Change</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes-9.11.21">Notes for BIND 9.11.21</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes-9.11.20">Notes for BIND 9.11.20</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes-9.11.19">Notes for BIND 9.11.19</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes-9.11.18">Notes for BIND 9.11.18</a></span></dt>
@@ -458,6 +459,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.arpaname.html

@@ -91,6 +91,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.ddns-confgen.html

@@ -236,6 +236,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.delv.html

@@ -624,6 +624,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.dig.html

@@ -1143,6 +1143,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.dnssec-checkds.html

@@ -148,6 +148,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.dnssec-coverage.html

@@ -270,6 +270,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.dnssec-dsfromkey.html

@@ -352,6 +352,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.dnssec-importkey.html

@@ -250,6 +250,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.dnssec-keyfromlabel.html

@@ -490,6 +490,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.dnssec-keygen.html

@@ -583,6 +583,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.dnssec-keymgr.html

@@ -416,6 +416,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.dnssec-revoke.html

@@ -171,6 +171,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.dnssec-settime.html

@@ -349,6 +349,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.dnssec-signzone.html

@@ -708,6 +708,6 @@ db.example.com.signed
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.dnssec-verify.html

@@ -202,6 +202,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.dnstap-read.html

@@ -134,6 +134,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.genrandom.html

@@ -127,6 +127,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.host.html

@@ -373,6 +373,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.isc-hmac-fixup.html

@@ -126,6 +126,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.lwresd.html

@@ -329,6 +329,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.20 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.21 (Extended Support Version)</p>
 </body>
 </html>

doc/arm/man.mdig.html

@@ -609,6 +609,6 @@
 </tr>
 </table>
 </div>