diff --git a/CHANGES b/CHANGES
index d4f2df86eb..28b3edd3af 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5653.	[bug]		Fixed a bug that caused the NSEC3 salt to be changed
+			for KASP zones on restart.
+			[GL #2725]
+
 5652.	[bug]		Copy and paste error caused the socket option to
 			be enabled instead of disabled. [GL #2746]
 
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 330a86c8be..92f0a693ed 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -76,3 +76,6 @@ Bug Fixes
 - Fix an error that would enable don't fragment socket option instead
   of disabling it leading to errors when sending the oversized UDP
   packets. [GL #2746]
+
+- Fixed a bug that caused the NSEC salt to be changed for KASP zones on
+  every startup. :gl:`#2725`