Add CHANGES for [GL #3937]

(cherry picked from commit aafcb8611c387615b6e7dc0aad8622e9252f9665)

diff --git a/CHANGES b/CHANGES
index d3fb3e5c50dfc706c771bfa2852ad7ea493adc17..d4d9606b44c08f15224b2f659d1f25e5702e2ad3 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+6124.  [bug]           When changing from a NSEC3 capable DNSSEC algorithm to
+                       an NSEC3 incapable DNSSEC algorithm using KASP the zone
+                       could sometimes be incompletely signed. [GL #3937]
+
 6120.  [bug]           Use two pairs of dns_db_t and dns_dbversion_t in a
                        catalog zone structure to avoid a race between the
                        dns__catz_update_cb() and dns_catz_dbupdate_callback()