Add CHANGES note for [GL #3234]

diff --git a/CHANGES b/CHANGES
index 1166e4eea3fcfbc6af24184c6de576c68834372b..f4b80b703c7abe1f85357e258f685ef7911153f9 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,11 @@
+5864.  [func]          The OID embedded at the start of a PRIVATEOID public
+                       key in a KEY, DNSKEY, CDNSKEY, or RKEY RR is now
+                       checked for validity when reading from wire or from
+                       zone files, and the OID is printed when
+                       'dig +rrcomments' is used. Similarly, the name
+                       embedded at the start of a PRIVATEDNS public key
+                       is also checked for validity. [GL #3234]
+
 5863.  [bug]           If there was a pending negative cache DS entry,
                        validations depending upon it could fail. [GL #3279]