diff --git a/CHANGES b/CHANGES
index 3ccceb7811..934bff54cb 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5863.	[bug]		If there was a pending negative cache DS entry,
+			validations depending upon it could fail. [GL #3279]
+
 5858.	[bug]		Don't remove CDS/CDNSKEY DELETE records on zone sign
 			when using 'auto-dnssec maintain;'. [GL #2931]