diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index a32a79031e..58d3b9e661 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -66,14 +66,6 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
-- Stale data in the cache could cause ``named`` to send non-minimized
-  queries despite QNAME minimization being enabled. This has been fixed.
-  :gl:`#2665`
-
-- When a DNSSEC-signed zone which only has a single signing key
-  available is migrated to ``dnssec-policy``, that key is now treated as
-  a Combined Signing Key (CSK). :gl:`#2857`
-
 - A recent change to the internal memory structure of zone databases
   inadvertently neglected to update the MAPAPI value for zone files in
   ``map`` format. This caused version 9.17.17 of ``named`` to attempt to
@@ -82,6 +74,14 @@ Bug Fixes
   so ``named`` rejects outdated files when encountering them.
   :gl:`#2872`
 
+- Stale data in the cache could cause ``named`` to send non-minimized
+  queries despite QNAME minimization being enabled. This has been fixed.
+  :gl:`#2665`
+
+- When a DNSSEC-signed zone which only has a single signing key
+  available is migrated to ``dnssec-policy``, that key is now treated as
+  a Combined Signing Key (CSK). :gl:`#2857`
+
 - When new IP addresses were added to the system during ``named``
   startup, ``named`` failed to listen on TCP for the newly added
   interfaces. :gl:`#2852`