diff --git a/configure.ac b/configure.ac
index 6d7f5feb54..34ba0d21ee 100644
--- a/configure.ac
+++ b/configure.ac
@@ -16,7 +16,7 @@
 #
 m4_define([bind_VERSION_MAJOR], 9)dnl
 m4_define([bind_VERSION_MINOR], 19)dnl
-m4_define([bind_VERSION_PATCH], 2)dnl
+m4_define([bind_VERSION_PATCH], 3)dnl
 m4_define([bind_VERSION_EXTRA], -dev)dnl
 m4_define([bind_DESCRIPTION], [(Development Release)])dnl
 m4_define([bind_SRCID], [m4_esyscmd_s([git rev-parse --short HEAD | cut -b1-7])])dnl
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 2cdadf56de..0828578049 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -9,7 +9,7 @@
 .. See the COPYRIGHT file distributed with this work for additional
 .. information regarding copyright ownership.
 
-Notes for BIND 9.19.2
+Notes for BIND 9.19.3
 ---------------------
 
 Security Fixes
@@ -35,16 +35,9 @@ Removed Features
 Feature Changes
 ~~~~~~~~~~~~~~~
 
-- Some more ``dnssec-policy`` configuration checks have been added to
-  detect weird policies such as missing KSK and/or ZSK, and too short
-  key lifetimes and re-sign periods. :gl:`#1611`.
+- None.
 
 Bug Fixes
 ~~~~~~~~~
 
-- Key files were updated every time the ``dnssec-policy`` key manager ran,
-  whether the metadata has changed or not. BIND now checks if changes were
-  applied before writing out the key files. :gl:`#3302`.
-
-- DNSSEC-signed catalog zones were not being processed correctly. This
-  has been fixed. :gl:`#3380`.
+- None.