Add CHANGES and release note for [GL #3071]

(cherry picked from commit 4d71a3b3097383cc1dbc7a02f0a524cada0e36e7)

diff --git a/CHANGES b/CHANGES
index 9a45da87fd44b85c60c83bea712af18d27437b28..d7c6b95af3a0a53a16dbea9d66e073414778ea73 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,9 @@
+5786.  [bug]           Defer detaching from zone->raw in zone_shutdown() if
+                       the zone is in the process of being dumped to disk to
+                       ensure that the unsigned serial number information is
+                       always written in the raw-format header of the signed
+                       version on an inline-signed zone. [GL #3071]
+
 5785.  [bug]           named could leak memory when two dnssec-policy clauses
                        had the same name. named failed to log this error.
                        [GL #3085]

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 4433300c813f145dcf4dab73e6efe232e54ed00c..0515049dfba7b2c17eff3ef3bdf40f6eb31f6e53 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -45,3 +45,9 @@ Bug Fixes
   to out-of-memory problem in a long run. This has been fixed. :gl:`#3051`
 
 - Overall memory use by ``named`` was optimized and reduced.  :gl:`#2398`
+
+- Under certain circumstances, the signed version of an inline-signed zone could
+  be dumped to disk without the serial number of the unsigned version of the
+  zone being saved. This could prevent resynchronization of zone contents after
+  ``named`` restarted, if the unsigned zone file had been modified while
+  ``named`` was not running. This has been fixed. :gl:`#3071`