From: Mark Andrews <marka@isc.org>
Date: Tue, 14 Mar 2023 02:32:47 +0000 (+1100)
Subject: Add CHANGES for [GL #3937]
X-Git-Tag: v9.18.14~39^2
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=68fb8ad9ddade77d39845a4d2fa478e623dba448;p=thirdparty%2Fbind9.git

Add CHANGES for [GL #3937]

(cherry picked from commit aafcb8611c387615b6e7dc0aad8622e9252f9665)
---

diff --git a/CHANGES b/CHANGES
index d3fb3e5c50d..d4d9606b44c 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+6124.	[bug]		When changing from a NSEC3 capable DNSSEC algorithm to
+			an NSEC3 incapable DNSSEC algorithm using KASP the zone
+			could sometimes be incompletely signed. [GL #3937]
+
 6120.	[bug]		Use two pairs of dns_db_t and dns_dbversion_t in a
 			catalog zone structure to avoid a race between the
 			dns__catz_update_cb() and dns_catz_dbupdate_callback()