diff --git a/CHANGES b/CHANGES
index ccec1b2cf5..e9e3ee9ffd 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5886.	[security]	Fix a crash in DNS-over-HTTPS (DoH) code caused by
+			premature TLS stream socket object deletion.
+			(CVE-2022-1183) [GL #3216]
+
 5885.	[bug]		RPZ NSIP and NSDNAME rule processing didn't handle stub
 			and static-stub zones at or above the query name.  This
 			has now been addressed. [GL #3232]