diff --git a/CHANGES b/CHANGES
index d14ab756c5..9d936a7fe8 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5923.	[bug]		Fix inheritance for dnssec-policy when checking for
+			inline-signing. [GL #3438]
+
 5922.	[bug]		Forwarding of UPDATE message could fail with the
 			introduction of netmgr. This has been fixed. [GL #3389]
 
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 489f3e2928..eecc87eb4c 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -42,3 +42,7 @@ Bug Fixes
 
 - A DNS compression would be applied on the root zone name if it is repeatedly
   used in the same RRSet. :gl:`#3423`
+
+- Non-dynamic zones that inherit dnssec-policy from the view or
+  options level were not marked as inline-signed, and thus were never
+  scheduled to be re-signed. This is now fixed. :gl:`#3438`