diff --git a/CHANGES b/CHANGES
index 597cd3cf51..f5212d81ca 100644
--- a/CHANGES
+++ b/CHANGES
@@ -15,7 +15,7 @@
 
 4170.	[security]	An incorrect boundary check in the OPENPGPKEY
 			rdatatype could trigger an assertion failure.
-			(CVE-2015-2986) [RT #40286]
+			(CVE-2015-5986) [RT #40286]
 
 4169.	[test]		Added a 'wire_test -d' option to read input as
 			raw binary data, for use as a fuzzing harness.