diff --git a/doc/Changelog b/doc/Changelog
index d6e08c331..8f4889bc8 100644
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -2,6 +2,7 @@
 	- removed abort on prealloc failure, error still printed but softfail.
 	- iana portlist updated.
 	- RFC 5702: RSASHA256 and RSASHA512 support enabled by default.
+	- ldns tarball updated (which also enables rsasha256 support).
 
 27 October 2009: Wouter
 	- iana portlist updated.
diff --git a/ldns-src.tar.gz b/ldns-src.tar.gz
index da40fd8dd..34738bcd6 100644
Binary files a/ldns-src.tar.gz and b/ldns-src.tar.gz differ