diff --git a/CHANGES b/CHANGES
index c6227baf10..5a404712cb 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+6068.	[bug]		Downloading a zone via TLS from a server which does
+			not negotiate "dot" ALPN token could crash BIND
+			on shutdown. That has been fixed. [GL #3767]
+
 6063.	[bug]		Revert a change that limited to honour single
 			read for TLSDNS as it broke XoT. [GL #3772]