add CHANGES

(cherry picked from commit ba26c6eb48ee28920472648b15b14d45ddf6dd0d)

diff --git a/CHANGES b/CHANGES
index bea52a1ec99a244066ede04bdd4ecaf286e579cb..305b41e8b738300775743b01189cf5a6f8094641 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5279.  [bug]           When loading, reject zones containing CDS or CDNSKEY
+                       RRsets at the zone apex if they would cause DNSSEC
+                       validation failures if published in the parent zone
+                       as the DS RRset.  [GL #1187]
+
        --- 9.14.5 released ---
 
 5277.  [bug]           Cache DB statistics could underflow when serve-stale