From: Aram Sargsyan <aram@isc.org>
Date: Thu, 2 Jun 2022 08:42:05 +0000 (+0000)
Subject: Add CHANGES and release note for [GL #3380]
X-Git-Tag: v9.19.2~4^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b8073cbe72563b931c6840eb4a1591ab4fc7aac9;p=thirdparty%2Fbind9.git

Add CHANGES and release note for [GL #3380]
---

diff --git a/CHANGES b/CHANGES
index ff445f22fb3..7ea8466bb77 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5899.	[func]		Don't try to process DNSSEC-related and ZONEMD records
+			in catz. [GL #3380]
+
 5898.	[cleanup]	Simplify BIND's internal DNS name compression API. As
 			RFC 6891 explains, it isn't practical to deploy new
 			label types or compression methods, so it isn't
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 4537e372ea6..2cdadf56deb 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -45,3 +45,6 @@ Bug Fixes
 - Key files were updated every time the ``dnssec-policy`` key manager ran,
   whether the metadata has changed or not. BIND now checks if changes were
   applied before writing out the key files. :gl:`#3302`.
+
+- DNSSEC-signed catalog zones were not being processed correctly. This
+  has been fixed. :gl:`#3380`.