From: Mark Andrews <marka@isc.org>
Date: Tue, 15 Feb 2022 06:42:45 +0000 (+1100)
Subject: Add CHANGES entry for [GL #3142]
X-Git-Tag: v9.19.0~79^2~1
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=d4c2395fff9a7bbed403d3e2a8dc931b163cd032;p=thirdparty%2Fbind9.git

Add CHANGES entry for [GL #3142]
---

diff --git a/CHANGES b/CHANGES
index 809c8313472..542742d26c6 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,9 @@
+5824.	[bug]		Invalid dnssec-policy definitions were being accepted
+			where the defined keys did not cover both KSK and ZSK
+			roles for a given algorithm.  This is now checked for
+			and the dnssec-policy is rejected if both roles are
+			not present for all algorithms in use. [GL #3142]
+
 5823.	[func]		Replace hazard pointers based lock-free list with
 			locked-list based queue that's simpler and has no or
 			little performance impact. [GL #3180]