diff --git a/CHANGES b/CHANGES
index 5c8236d6f9..8e279f5d93 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5899.	[func]		Don't try to process DNSSEC-related and ZONEMD records
+			in catz. [GL #3380]
+
 5896.	[func]		Add some more dnssec-policy checks to detect weird
 			policies. [GL #1611]
 
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 3a6ddd8b5d..0d5399df98 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -45,3 +45,6 @@ Bug Fixes
 - Key files were updated every time the ``dnssec-policy`` key manager ran,
   whether the metadata has changed or not. BIND now checks if changes were
   applied before writing out the key files. :gl:`#3302`.
+
+- DNSSEC-signed catalog zones were not being processed correctly. This
+  has been fixed. :gl:`#3380`.