Add release note for GL #2686

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 1d41b63a26656a7db0bb4aa47428900f6d0eafaa..26f6771a26ada086b0e2a4466190bcdb4abc6926 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -58,6 +58,11 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
+- The code managing :rfc:`5011` trust anchors created an invalid
+  placeholder keydata record upon a refresh failure, which prevented the
+  database of managed keys from subsequently being read back. This has
+  been fixed. :gl:`#2686`
+
 - Signed, insecure delegation responses prepared by ``named`` either
   lacked the necessary NSEC records or contained duplicate NSEC records
   when both wildcard expansion and CNAME chaining were required to