Add release note for GL #3673

diff --git a/doc/notes/notes-9.16.39.rst b/doc/notes/notes-9.16.39.rst
index 7b9575ce1db5b6c794e51dc0dfb176d8fc522fbb..4e88a9dbdbd740dec2e5ffce58452bdfc6d9e424 100644 (file)
--- a/doc/notes/notes-9.16.39.rst
+++ b/doc/notes/notes-9.16.39.rst
@@ -44,6 +44,14 @@ Bug Fixes
   configured as a member zone for a catalog zone. This has been fixed.
   :gl:`#3911`
 
+- When :iscman:`named` starts up, it sends a query for the DNSSEC key
+  for each configured trust anchor to determine whether the key has
+  changed. In some unusual cases, the query might depend on a zone for
+  which the server is itself authoritative, and would have failed if it
+  were sent before the zone was fully loaded. This has now been fixed by
+  delaying the key queries until all zones have finished loading.
+  :gl:`#3673`
+
 Known Issues
 ~~~~~~~~~~~~