Add release note

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 520a61c7f824837fe3fbcf5cc3d7305d96a55694..a068f1911f2f1ec0d3e0628b2e3a8353441a7364 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -81,3 +81,8 @@ Bug Fixes
 
 - Fixed a bug that caused the NSEC salt to be changed for KASP zones on
   every startup. :gl:`#2725`
+
+- Signed, insecure delegation responses prepared by ``named`` either
+  lacked the necessary NSEC records or contained duplicate NSEC records
+  when both wildcard expansion and CNAME chaining were required to
+  prepare the response. This has been fixed. :gl:`#2759`