From d4c2395fff9a7bbed403d3e2a8dc931b163cd032 Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Tue, 15 Feb 2022 17:42:45 +1100 Subject: [PATCH] Add CHANGES entry for [GL #3142] --- CHANGES | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/CHANGES b/CHANGES index 809c831347..542742d26c 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,9 @@ +5824. [bug] Invalid dnssec-policy definitions were being accepted + where the defined keys did not cover both KSK and ZSK + roles for a given algorithm. This is now checked for + and the dnssec-policy is rejected if both roles are + not present for all algorithms in use. [GL #3142] + 5823. [func] Replace hazard pointers based lock-free list with locked-list based queue that's simpler and has no or little performance impact. [GL #3180]