diff --git a/CHANGES b/CHANGES
index 4227674027..d0e25727c9 100644
--- a/CHANGES
+++ b/CHANGES
@@ -46,7 +46,8 @@
 4490.	[maint]		Added AAAA (2001:500:12::d0d) for G.ROOT-SERVERS.NET.
 
 4489.	[security]	It was possible to trigger assertions when processing
-			a response. (CVE-2016-8864) [RT #43465]
+			a response containing a DNAME answer. (CVE-2016-8864)
+			[RT #43465]
 
 4488.	[port]		Darwin: use -framework for Kerberos. [RT #43418]