diff --git a/CHANGES b/CHANGES
index b8a38ee17e..0958628bc9 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5923.	[bug]		Fix inheritance for dnssec-policy when checking for
+			inline-signing. [GL #3438]
+
 5922.	[bug]		Forwarding of UPDATE message could fail with the
 			introduction of netmgr. This has been fixed. [GL #3389]
 
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index d73f551a02..70ae09d0bf 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -40,4 +40,6 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
-- None.
+- Non-dynamic zones that inherit dnssec-policy from the view or
+  options level were not marked as inline-signed, and thus were never
+  scheduled to be re-signed. This is now fixed. :gl:`#3438`