Add release note and change for GL #3591

Breaking news.

(cherry picked from commit 1cf2f6fe684458afb26482a9b5ad324c57cdf25e)

diff --git a/CHANGES b/CHANGES
index 693ee3eb7fe5eb00897361290b1949a1dd0ede68..0242ccfa62d34bb98d43d0dc7f1afbe50c1a5d2f 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+6013.  [bug]           Fix a crash that could happen when you change
+                       a dnssec-policy zone with NSEC3 to start using
+                       inline-signing. [GL #3591]
+
 6009.  [bug]           Don't trust a placeholder KEYDATA from the managed-keys
                        zone by adding it into secroots. [GL #2895]
 

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index e3d90cc22a4c705129d5ed5c2de683d17cd9337d..2333d7d0c18096e6887e19ff3f4f113e342b8af8 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -56,3 +56,6 @@ Bug Fixes
   enter into a state where it would not recover without stopping ``named``,
   manually deleting ``managed-keys.bind`` and ``managed-keys.bind.jnl`` files,
   and starting ``named`` again. :gl:`#2895`
+
+- Fixed a crash that happens when you reconfigure a ``dnssec-policy``
+  zone that uses NSEC3 to enable ``inline-signing``. :gl:`#3591`