diff --git a/CHANGES b/CHANGES
index 73f87ac6e9..668db3ef55 100644
--- a/CHANGES
+++ b/CHANGES
@@ -47,6 +47,10 @@
 			condition due to DNS validation taking a long time.
 			(CVE-2023-50387) [GL #4424]
 
+			The same code change also addresses another problem:
+			preparing NSEC3 closest encloser proofs could exhaust
+			available CPU resources. (CVE-2023-50868) [GL #4459]
+
 6321.	[security]	Change 6315 inadvertently introduced regressions that
 			could cause named to crash. [GL #4234]