Add release note for GL #2686

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 650f305f4ac6d027cdad2bfb7ad50bcb411b0faf..9a50a9917929e9da4351e4dd561ba1e38c343b1e 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -90,6 +90,11 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
+- The code managing :rfc:`5011` trust anchors created an invalid
+  placeholder keydata record upon a refresh failure, which prevented the
+  database of managed keys from subsequently being read back. This has
+  been fixed. :gl:`#2686`
+
 - Signed, insecure delegation responses prepared by ``named`` either
   lacked the necessary NSEC records or contained duplicate NSEC records
   when both wildcard expansion and CNAME chaining were required to