diff --git a/CHANGES b/CHANGES
index 73a25b42c2..21d86fb366 100644
--- a/CHANGES
+++ b/CHANGES
@@ -18,7 +18,7 @@
 
 3349.	[bug]		Change #3345 was incomplete. [RT #30233]
 
-3348.	[security]	prevent RRSIG data from being cached if a negative 
+3348.	[bug]		Prevent RRSIG data from being cached if a negative 
 			record matching the covering type exists at a higher 
 			trust level. Such data already can't be retrieved from 
 			the cache since change 3218 -- this prevents it