Add release note for GL #3673

diff --git a/doc/notes/notes-9.18.13.rst b/doc/notes/notes-9.18.13.rst
index 3b134d68c6eeef4e77fac3998c1f90c12a4164b1..90b374a98bdd70d197cae01f8fdcf468e4dfc132 100644 (file)
--- a/doc/notes/notes-9.18.13.rst
+++ b/doc/notes/notes-9.18.13.rst
@@ -59,6 +59,14 @@ Bug Fixes
   configured as a member zone for a catalog zone. This has been fixed.
   :gl:`#3911`
 
+- When :iscman:`named` starts up, it sends a query for the DNSSEC key
+  for each configured trust anchor to determine whether the key has
+  changed. In some unusual cases, the query might depend on a zone for
+  which the server is itself authoritative, and would have failed if it
+  were sent before the zone was fully loaded. This has now been fixed by
+  delaying the key queries until all zones have finished loading.
+  :gl:`#3673`
+
 Known Issues
 ~~~~~~~~~~~~