diff --git a/CHANGES b/CHANGES
index f21c08e29d..56d1c4f020 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+6389.	[bug]		dnssec-verify and dnssec-signzone could fail if there
+			was an obscured DNSKEY RRset at a delegatation.
+			[GL #4517]
+
 6388.	[bug]		Prevent an assertion failure caused by passing NULL to
 			dns_dispatch_resume() when a dns_request times out close
 			to view shutdown. [GL #4719]