From 501008c5108c2f8ef8412e2a12e8bcbb260ef974 Mon Sep 17 00:00:00 2001
From: Mark Andrews <marka@isc.org>
Date: Wed, 21 Apr 2021 13:27:23 +1000
Subject: [PATCH] Add CHANGES for [GL #2445]

(cherry picked from commit fd1f7b6480756eec57053d44fd3f180d86ad098c)
---
 CHANGES | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/CHANGES b/CHANGES
index 4d751e957f..d4ccb4c444 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,5 +1,8 @@
 5631.	[bug]		Update ZONEMD to match RFC 8976. [GL #2658]
 
+5630.	[func]		Treat DNSSEC responses with NSEC3 iterations greater
+			than 150 as insecure. [GL #2445]
+
 5629.	[func]		Reduce the supported maximum number of iterations
 			that can be configured in an NSEC3 zone to 150.
 			[GL #2642]