diff --git a/CHANGES b/CHANGES
index 872b3e30c6..245df18ce1 100644
--- a/CHANGES
+++ b/CHANGES
@@ -16,7 +16,7 @@
 
 3349.	[bug]		Change #3345 was incomplete. [RT #30233]
 
-3348.	[security]	prevent RRSIG data from being cached if a negative 
+3348.	[bug]		Prevent RRSIG data from being cached if a negative 
 			record matching the covering type exists at a higher 
 			trust level. Such data already can't be retrieved from 
 			the cache since change 3218 -- this prevents it