Add release note for [GL #3142]

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 864101ae26a8f2b82fe91b17a733f547f7ec74c6..1bb691f6c500d257a3def33c31af1084ec02afdf 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -100,3 +100,9 @@ Bug Fixes
   miscalculated in certain resolution scenarios, potentially causing the
   value of the counter to drop below zero. This has been fixed.
   :gl:`#3147`
+
+- Invalid dnssec-policy definitions were being accepted where the
+  defined keys did not cover both KSK and ZSK roles for a given
+  algorithm.  This is now checked for and the dnssec-policy is
+  rejected if both roles are not present for all algorithms in use.
+  :gl:`#3142`