Index: server/major/bind.xml
===================================================================
--- server/major/bind.xml	(revision 98a83b16cbcfe82afc7a76279e14b190e0147b52)
+++ server/major/bind.xml	(revision cc64b232131c326455ea941e9307109e59487dc2)
@@ -7,8 +7,8 @@
   <!ENTITY bind-download-http " ">
   <!ENTITY bind-download-ftp  "ftp://ftp.isc.org/isc/bind9/&bind-version;/bind-&bind-version;.tar.xz">
-  <!ENTITY bind-md5sum        "35c9ac52b75232e9e6b96265bebca616">
+  <!ENTITY bind-md5sum        "5ef3e773f671886a40148c4dd01d017a">
   <!ENTITY bind-size          "3.3 MB">
-  <!ENTITY bind-buildsize     "106 MB (22 MB installed)">
-  <!ENTITY bind-time          "0.8 SBU (with parallelism=4; add 34+ minutes, processor independent, to run the complete test suite)">
+  <!ENTITY bind-buildsize     "123 MB (23 MB installed)">
+  <!ENTITY bind-time          "0.9 SBU (with parallelism=4; add 34+ minutes, processor independent, to run the complete test suite)">
 ]>
 
@@ -87,9 +87,11 @@
     <bridgehead renderas="sect4">Optional</bridgehead>
     <para role="optional">
+      <xref linkend="curl"/>,
       <xref linkend="libidn2"/>,
       <xref linkend="libxml2"/>,
       <xref linkend="mitkrb"/>,
-      <ulink url="https://cmocka.org/">cmocka</ulink>, and
-      <ulink url='https://github.com/cjheath/geoip'>geoip</ulink>
+      <ulink url="https://cmocka.org/">cmocka</ulink>,
+      <ulink url='https://github.com/cjheath/geoip'>geoip</ulink>, and
+      <ulink url="https://pypi.python.org/pypi/Sphinx">Sphinx</ulink>
     </para>
 
@@ -557,18 +559,19 @@
       <seglistitem>
 
-        <seg>arpaname, bind9-config hardlinked to isc-config.sh, ddns-confgen,
-        delv, dig, dnssec-dsfromkey,
-        dnssec-importkey, dnssec-keyfromlabel, dnssec-keygen, dnssec-revoke,
-        dnssec-settime, dnssec-signzone, dnssec-verify, genrandom, host,
-        isc-hmac-fixup, lwresd hardlinked to named, named-checkconf,
+        <seg>arpaname, <!--bind9-config hardlinked to isc-config.sh,--> 
+        ddns-confgen, delv, dig, dnssec-cds, dnssec-checkds, dnssec-coverage, 
+        dnssec-dsfromkey, dnssec-importkey, dnssec-keyfromlabel, dnssec-keygen, 
+        dnssec-keymgr, dnssec-revoke, dnssec-settime, dnssec-signzone, 
+        dnssec-verify, <!--genrandom,--> host, mdig, 
+        <!--isc-hmac-fixup, lwresd hardlinked to named,--> named-checkconf,
         named-checkzone, named-compilezone (symlink), named-journalprint,
-        named-rrchecker, nsec3hash, nslookup, nsupdate, rndc, rndc-confgen,
-        and tsig-keygen (symlink)</seg>
-
-        <seg>libbind9.so, libdns.so, libirs.so, libisc.so, libisccc.so,
-        libisccfg.so, and liblwres.so</seg>
-
-        <seg>/usr/include/{bind9,dns,dst,irs,isc,isccc,isccfg,lwres,pk11,pkcs11},
-        /usr/share/doc/bind-&bind-version; and /srv/named</seg>
+        named-rrchecker, named-nzd2nzf, nsec3hash, nslookup, nsupdate, rndc, 
+        rndc-confgen, and tsig-keygen (symlink)</seg>
+
+        <seg>libbind9.so, libdns.so, libirs.so, libisc.so, libisccc.so, and
+        libisccfg.so</seg>
+
+        <seg>/usr/include/{bind9,dns,dst,irs,isc,isccc,isccfg,ns,pk11,pkcs11}
+        <!--/usr/share/doc/bind-&bind-version;--> and /srv/named</seg>
       </seglistitem>
     </segmentedlist>
@@ -591,4 +594,5 @@
       </varlistentry>
 
+<!-- Not present as of 9.16.5
       <varlistentry id="bind9-config">
         <term><command>bind9-config</command></term>
@@ -602,4 +606,5 @@
         </listitem>
       </varlistentry>
+-->
 
       <varlistentry id="ddns-confgen">
@@ -639,5 +644,18 @@
         </listitem>
       </varlistentry>
-<!--
+
+      <varlistentry id="dnssec-cds">
+        <term><command>dnssec-cds</command></term>
+        <listitem>
+          <para>
+            changes DS records for a child zone based on
+            CDS/CDNSKEY.
+          </para>
+          <indexterm zone="bind dnssec-cds">
+            <primary sortas="b-dnssec-cds">dnssec-cds</primary>
+          </indexterm>
+        </listitem>
+      </varlistentry>
+
       <varlistentry id="dnssec-checkds">
         <term><command>dnssec-checkds</command></term>
@@ -664,5 +682,5 @@
           </indexterm>
         </listitem>
-      </varlistentry>-->
+      </varlistentry>
 
       <varlistentry id="dnssec-dsfromkey">
@@ -712,4 +730,16 @@
           <indexterm zone="bind dnssec-keygen">
             <primary sortas="b-dnssec-keygen">dnssec-keygen</primary>
+          </indexterm>
+        </listitem>
+      </varlistentry>
+
+      <varlistentry id="dnssec-keymgr">
+        <term><command>dnssec-keymgr</command></term>
+        <listitem>
+          <para>
+            ensures correct DNSKEY coverage based on a defined policy.
+          </para>
+          <indexterm zone="bind dnssec-keymgr">
+            <primary sortas="b-dnssec-keymgr">dnssec-keymgr</primary>
           </indexterm>
         </listitem>
@@ -766,4 +796,5 @@
       </varlistentry>
 
+<!-- No longer present with 9.16.5
       <varlistentry id="genrandom">
         <term><command>genrandom</command></term>
@@ -777,4 +808,5 @@
         </listitem>
       </varlistentry>
+-->
 
       <varlistentry id="host">
@@ -790,4 +822,5 @@
       </varlistentry>
 
+ <!-- No longer present with 9.16.5
       <varlistentry id="isc-config.sh">
         <term><command>isc-config.sh</command></term>
@@ -825,4 +858,17 @@
         </listitem>
       </varlistentry>
+-->
+
+      <varlistentry id="mdig">
+        <term><command>mdig</command></term>
+        <listitem>
+          <para>
+            is a version of dig that allows multiple queries at once.
+          </para>
+          <indexterm zone="bind mdig">
+            <primary sortas="b-mdig">mdig</primary>
+          </indexterm>
+        </listitem>
+      </varlistentry>
 
       <varlistentry id="named">
@@ -901,4 +947,16 @@
       </varlistentry>
 
+      <varlistentry id="named-nzd2nzf">
+        <term><command>named-nzd2nzf</command></term>
+        <listitem>
+          <para>
+            converts an NZD database to NZF text format.
+          </para>
+          <indexterm zone="bind named-nzd2nzf">
+            <primary sortas="b-named-nzd2nzf">named-nzd2nzf</primary>
+          </indexterm>
+        </listitem>
+      </varlistentry>
+
       <varlistentry id="nsec3hash">
         <term><command>nsec3hash</command></term>
