Add CHANGES for [GL #3937]

diff --git a/CHANGES b/CHANGES
index f7ab1c7fd94701ddf0611cdc43829db3225ed19a..de6ee4351a8cca00b9a0b20dbd96a76073623b36 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+6124.  [bug]           When changing from a NSEC3 capable DNSSEC algorithm to
+                       an NSEC3 incapable DNSSEC algorithm using KASP the zone
+                       could sometimes be incompletely signed. [GL #3937]
+
 6123.  [placeholder]
 
 6122.  [func]          BIND now requires liburcu for lock-free data structures