diff --git a/CHANGES b/CHANGES
index c01583ed8c..2093d52eb8 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5609.	[func]		GSSAPI support no longer uses the ISC SPNEGO
+			implementation. [GL #2607]
+
 5608.	[bug]		Dig now honors +retry=0 and +tries=1 when queries
 			are sent over TCP (+tcp) and the remote server closes
 			the connection prematurely. [GL #2490]
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 96d83f5363..c43b733c9d 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -34,7 +34,12 @@ Removed Features
 Feature Changes
 ~~~~~~~~~~~~~~~
 
-- None.
+- The GSSAPI no longer uses the ISC implementation of the SPNEGO
+  mechanism and instead relies on the SPNEGO implementation from the
+  system Kerberos library. All major Kerberos libraries contain the
+  SPNEGO mechanism implementation. This change was implemented in BIND
+  9.17.2, but it was not included in the release notes at the time.
+  [GL #2607]
 
 Bug Fixes
 ~~~~~~~~~