Add change and release note for [#2780]

(cherry picked from commit d0668bd4cc4453b12a028e6dfd2101d0a0fdca35)

diff --git a/CHANGES b/CHANGES
index c9de9cfd9a8dc1d2aa1b9caf127ed7b6a8e58fb7..1740c86a1d6537a9565c0a128b272c14f087f044 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5667.  [bug]           The configuration-checking code failed to account for
+                       the inheritance rules of the "dnssec-policy" option.
+                       [GL #2780]
+
 5666.  [func]          Tweak the safe "edns-udp-size" to match the probing
                        value from BIND 9.16 for better compatibility. Also
                        ``named`` now sets the DON'T FRAGMENT flag on outgoing

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 6a3395284512e45746e81ca5ec7e70bce6735617..523732080142612e16e10aa324eee73d22a43315 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -62,4 +62,7 @@ Bug Fixes
 
 - A deadlock at startup was introduced when fixing :gl:`#1875` because when
   locking key files for reading and writing, "in-view" logic was not taken into
-  account. This has been fixed. [GL #2783]
+  account. This has been fixed. :gl:`#2783`
+
+- Checking of ``dnssec-policy`` was broken. The checks failed to account for
+  ``dnssec-policy`` inheritance. :gl:`#2780`