diff --git a/CHANGES b/CHANGES
index df7932c032..332b0362fc 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5289.	[bug]		Address NULL pointer dereference in rpz.c:rpz_detach.
+			[GL #1210]
+
 5288.	[bug]		dnssec-must-be-secure was not always honoured.
 			[GL #1209]
 
diff --git a/lib/dns/rpz.c b/lib/dns/rpz.c
index 45cf34217a..d4d5766c78 100644
--- a/lib/dns/rpz.c
+++ b/lib/dns/rpz.c
@@ -2126,7 +2126,7 @@ rpz_detach(dns_rpz_zone_t **rpzp) {
 		dns_db_detach(&rpz->db);
 	}
 	if (rpz->updaterunning) {
-		isc_task_purgeevent(rpz->rpzs->updater, &rpz->updateevent);
+		isc_task_purgeevent(rpzs->updater, &rpz->updateevent);
 		if (rpz->updbit != NULL) {
 			dns_dbiterator_destroy(&rpz->updbit);
 		}