Add CHANGES for [GL #1794] and [GL #4459]

(cherry picked from commit 9b5ed853d07717b59f749f1a9445a02e0f4f5419)

diff --git a/CHANGES b/CHANGES
index f64ea009b552f1365790a72f057ede8516a3fc3d..86ff535f2925d74fa9ac0c856e496115e5335ef1 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,11 @@
+6312.  [bug]           Conversion from NSEC3 signed to NSEC signed could
+                       temporarily put the zone into a state where it was
+                       treated as unsigned until the NSEC chain was built.
+                       Additionally conversion from one set of NSEC3 parameters
+                       to another could also temporarily put the zone into a
+                       state where it was treated as unsigned until the new
+                       NSEC3 chain was built. [GL #1794] [GL #4495]
+
 6310.  [bug]           Memory leak in zone.c:sign_zone. When named signed a
                        zone it could leak dst_keys due to a misplaced
                        'continue'. [GL #4488]