diff --git a/CHANGES b/CHANGES
index d9a0c0e083..45bbc7a4be 100644
--- a/CHANGES
+++ b/CHANGES
@@ -2,6 +2,11 @@
 			'host -C' commands when one of the name servers returns
 			SERVFAIL. [GL #4508]
 
+6313.	[bug]		When dnssec-policy is in effect the DNSKEY's TTLs in
+			the zone where not being updated to match the policy.
+			This lead to failures when DNSKEYs where updated as the
+			TTLs mismatched. [GL #4466]
+
 6312.	[bug]		Conversion from NSEC3 signed to NSEC signed could
 			temporarily put the zone into a state where it was
 			treated as unsigned until the NSEC chain was built.