diff --git a/CHANGES b/CHANGES
index 60efcbbbd3..e1315c1c5b 100644
--- a/CHANGES
+++ b/CHANGES
@@ -7,8 +7,8 @@
 4407.	[performance]	Use GCC builtin for clz in RPZ lookup code.
 			[RT #42818]
 
-4406.	[bug]		getrrsetbyname with a non absolute name could
-			trigger a infinite recursion bug in lwresd
+4406.	[security]	getrrsetbyname with a non absolute name could
+			trigger an infinite recursion bug in lwresd
 			and named with lwres configured if when combined
 			with a search list entry the resulting name is
 			too long. (CVE-2016-2775) [RT #42694]