Add CHANGES note for [GL #4466]

diff --git a/CHANGES b/CHANGES
index 6977a2e3952267a44ed924d82650a6229e01dbc3..e635e97d99042e3da87282f45adbfc52aea47c85 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+6313.  [bug]           When dnssec-policy is in effect the DNSKEY's TTLs in
+                       the zone where not being updated to match the policy.
+                       This lead to failures when DNSKEYs where updated as the
+                       TTLs mismatched. [GL #4466]
+
 6312.  [bug]           Conversion from NSEC3 signed to NSEC signed could
                        temporarily put the zone into a state where it was
                        treated as unsigned until the NSEC chain was built.