add missing change note

diff --git a/CHANGES b/CHANGES
index 704739a20e9219b274c4b96fe37fc3826d3566c9..3539b355b7cdab103a18695221e7ed415b931d2a 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+3331.  [security]      dns_rdataslab_fromrdataset could produce bad
+                       rdataslabs. [RT #29644]
+
 3329.  [bug]           Handle RRSIG signer-name case consistently: We
                        generate RRSIG records with the signer-name in
                        lower case.  We accept them with any case, but if