diff --git a/CHANGES b/CHANGES
index 5a4b6a0eed..0045fc0373 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+6382.	[bug]		Fix RPZ response's SOA record TTL, which was incorrectly
+			set to 1 if 'add-soa' is used. [GL #3323]
+
 6381.	[bug]		dns_qp_lookup() could position the iterator at the
 			wrong predecessor when searching for names with
 			uncommon characters, which are encoded as two-octet
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 3dc09966b5..133d75c2a3 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -35,7 +35,8 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
-- None.
+- An RPZ response's SOA record TTL was set to 1 instead of the SOA TTL, if
+  ``add-soa`` was used. This has been fixed. :gl:`#3323`
 
 Known Issues
 ~~~~~~~~~~~~