DNSSEC fix, signed wildcard CNAME to unsigned domain.
diff --git a/CHANGELOG b/CHANGELOG
index 0eb3c0c..7c621e2 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -5,6 +5,10 @@
Fix inotify code to handle dangling symlinks better and
not SEGV in some circumstances.
+ DNSSEC fix. In the case of a signed CNAME generated by a
+ wildcard which pointed to an unsigned domain, the wrong
+ status would be logged, and some necessary checks omitted.
+
version 2.73
Fix crash at startup when an empty suffix is supplied to