diff --git a/CHANGES b/CHANGES
index a8eef143cc..073b1ed277 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5933.	[port]		Automatically disable RSASHA1 and NSEC3RSASHA1 in
+			named on Fedorda 33, Oracle Linux 9 and RHEL9 when
+			they are disabled by the security policy. [GL #3469]
+
 5932.	[bug]		Fix rndc dumpdb -expired and always include expired
 			RRsets, not just for RBTDB_VIRTUAL time window.
 			[GL #3462]