diff --git a/CHANGES b/CHANGES
index 333f0e7d1f..7802216b8a 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+6389.	[bug]		dnssec-verify and dnssec-signzone could fail if there
+			was an obscured DNSKEY RRset at a delegatation.
+			[GL #4517]
+
 6388.	[placeholder]
 
 6387.	[func]		Added a new statistics variable "recursive high-water"