diff --git a/CHANGES b/CHANGES
index b74f254722..ce1860a8dd 100644
--- a/CHANGES
+++ b/CHANGES
@@ -91,7 +91,9 @@
 			from the Git repository, run "autoreconf -fi" first.
 			[GL #4]
 
-5390.	[placeholder]
+5390.	[security]	Replaying a TSIG BADTIME response as a request could
+			trigger an assertion failure. (CVE-2020-8617)
+			[GL #1703]
 
 5389.	[bug]		Finish PKCS#11 code cleanup, fix a couple of smaller
 			bugs and use PKCS#11 v3.0 EdDSA macros and constants.