diff --git a/CHANGES b/CHANGES
index b86be21168..6ab88ae075 100644
--- a/CHANGES
+++ b/CHANGES
@@ -33,8 +33,8 @@
 4254.	[bug]		Address missing lock when getting zone's serial.
 			[RT #41072]
 
-4253.	[bug]		Address fetch context reference count handling error
-			on socket error.  [RT#40945]
+4253.	[security]	Address fetch context reference count handling error
+			on socket error. (CVE-2015-8461)  [RT#40945]
 
 4248.	[performance]	Add an isc_atomic_storeq() function, use it in
 			stats counters to improve performance.