diff --git a/CHANGES b/CHANGES
index 044323af67..58e3a6477e 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5942.	[bug]		Fix tkey.c:buildquery() function's error handling by
+			adding the missing cleanup code. [GL #3492]
+
 5941.	[func]		Zones with dnssec-policy now require dynamic DNS or
 			inline-siging to be configured explicitly. [GL #3381]