From: Aram Sargsyan <aram@isc.org>
Date: Mon, 31 Oct 2022 13:03:47 +0000 (+0000)
Subject: Add CHANGES and release notes for [GL #2895]
X-Git-Tag: v9.18.9~7^2
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=ac25292556d29feb6fc5e36a72a7f99b52c79cb5;p=thirdparty%2Fbind9.git

Add CHANGES and release notes for [GL #2895]

(cherry picked from commit 3bf4bc7336d9fcb48bc1e3a4834b7a37cd50552f)
---

diff --git a/CHANGES b/CHANGES
index c42f95af1ff..170cffb915a 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+6009.	[bug]		Don't trust a placeholder KEYDATA from the managed-keys
+			zone by adding it into secroots. [GL #2895]
+
 6008.	[bug]		Fixed a race condition that could cause a crash
 			in dns_zone_synckeyzone(). [GL #3617]
 
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index a501bfe4dcd..0f66431f789 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -54,3 +54,9 @@ Bug Fixes
 - The port in remote servers such as in :any:`primaries` and
   :any:`parental-agents` could be wrongly configured because of an inheritance
   bug. :gl:`#3627`
+
+- When having Internet connectivity issues during the initial startup of
+  ``named``, BIND resolver with :any:`dnssec-validation` set to ``auto`` could
+  enter into a state where it would not recover without stopping ``named``,
+  manually deleting ``managed-keys.bind`` and ``managed-keys.bind.jnl`` files,
+  and starting ``named`` again. :gl:`#2895`