From: Tom Krizek <tkrizek@isc.org>
Date: Fri, 3 Mar 2023 12:10:26 +0000 (+0100)
Subject: Add release note for GL #3673
X-Git-Tag: v9.18.13~2^2
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=a6d72365eeec0b0de1968b8061e810e1ad53bf4d;p=thirdparty%2Fbind9.git

Add release note for GL #3673
---

diff --git a/doc/notes/notes-9.18.13.rst b/doc/notes/notes-9.18.13.rst
index 3b134d68c6e..90b374a98bd 100644
--- a/doc/notes/notes-9.18.13.rst
+++ b/doc/notes/notes-9.18.13.rst
@@ -59,6 +59,14 @@ Bug Fixes
   configured as a member zone for a catalog zone. This has been fixed.
   :gl:`#3911`
 
+- When :iscman:`named` starts up, it sends a query for the DNSSEC key
+  for each configured trust anchor to determine whether the key has
+  changed. In some unusual cases, the query might depend on a zone for
+  which the server is itself authoritative, and would have failed if it
+  were sent before the zone was fully loaded. This has now been fixed by
+  delaying the key queries until all zones have finished loading.
+  :gl:`#3673`
+
 Known Issues
 ~~~~~~~~~~~~