From e51f317622e7136877875e5f88fab43c1df7b1e1 Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Tue, 19 Dec 2023 19:01:22 +1100 Subject: [PATCH] Add CHANGES note for [GL #4466] (cherry picked from commit 531420bac08c2be902c3134f38b665b2db5e261a) --- CHANGES | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/CHANGES b/CHANGES index d9a0c0e083..45bbc7a4be 100644 --- a/CHANGES +++ b/CHANGES @@ -2,6 +2,11 @@ 'host -C' commands when one of the name servers returns SERVFAIL. [GL #4508] +6313. [bug] When dnssec-policy is in effect the DNSKEY's TTLs in + the zone where not being updated to match the policy. + This lead to failures when DNSKEYs where updated as the + TTLs mismatched. [GL #4466] + 6312. [bug] Conversion from NSEC3 signed to NSEC signed could temporarily put the zone into a state where it was treated as unsigned until the NSEC chain was built.