diff --git a/CHANGES b/CHANGES
index cf5cfd871f..3661ac40c7 100644
--- a/CHANGES
+++ b/CHANGES
@@ -69,7 +69,8 @@
 4490.	[maint]		Added AAAA (2001:500:12::d0d) for G.ROOT-SERVERS.NET.
 
 4489.	[security]	It was possible to trigger assertions when processing
-			a response. (CVE-2016-8864) [RT #43465]
+			a response containing a DNAME answer. (CVE-2016-8864)
+			[RT #43465]
 
 4488.	[port]		Darwin: use -framework for Kerberos. [RT #43418]