Add CHANGES notes for [GL !5923]

(cherry picked from commit 6237273205887710553e88d972b6f95b676d41b0)

diff --git a/CHANGES b/CHANGES
index a38e309632825a7c799925fcd768ca79db2ecf00..24baafeca34e6ccd54b13505320fd2e7ddb608f0 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,10 @@
+5982.  [func]          Extend dig to allow requests to be signed using SIG(0)
+                       as well as providing a mechanism to specify the signing
+                       time. [GL !5923]
+
+5981.  [test]          Add dns_message_checksig fuzzer to check messages
+                       signed using TSIG or SIG(0). [GL !5923]
+
 5978.  [port]          The ability to use pkcs11 via engine_pkcs11 has been
                        restored, by only using deprecated APIs in
                        OpenSSL 3.0.0. BIND needs to be compiled with