Add release note and change for GL #3591

Breaking news.

(cherry picked from commit 1cf2f6fe684458afb26482a9b5ad324c57cdf25e)

diff --git a/CHANGES b/CHANGES
index 170cffb915ae68934a996d5f9d33ce4e49cf4c14..b22b434acc4a36e4c86eb89dbffd69d00e470326 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+6013.  [bug]           Fix a crash that could happen when you change
+                       a dnssec-policy zone with NSEC3 to start using
+                       inline-signing. [GL #3591]
+
 6009.  [bug]           Don't trust a placeholder KEYDATA from the managed-keys
                        zone by adding it into secroots. [GL #2895]
 

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 0f66431f789d322c5c74103ef76ce1ef0faf1f5f..53c913e4320eb83d43dc3a36474c7d1c25a4eafe 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -60,3 +60,6 @@ Bug Fixes
   enter into a state where it would not recover without stopping ``named``,
   manually deleting ``managed-keys.bind`` and ``managed-keys.bind.jnl`` files,
   and starting ``named`` again. :gl:`#2895`
+
+- Fixed a crash that happens when you reconfigure a ``dnssec-policy``
+  zone that uses NSEC3 to enable ``inline-signing``. :gl:`#3591`