Add CHANGES for [GL #2445]

(cherry picked from commit fd1f7b6480756eec57053d44fd3f180d86ad098c)

diff --git a/CHANGES b/CHANGES
index 4d751e957f261e9770d9c30e5adb50146a4023dd..d4ccb4c4448ac2e3f2fe2e3c5b5403b56b38832d 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,5 +1,8 @@
 5631.  [bug]           Update ZONEMD to match RFC 8976. [GL #2658]
 
+5630.  [func]          Treat DNSSEC responses with NSEC3 iterations greater
+                       than 150 as insecure. [GL #2445]
+
 5629.  [func]          Reduce the supported maximum number of iterations
                        that can be configured in an NSEC3 zone to 150.
                        [GL #2642]