diff --git a/CHANGES b/CHANGES
index 65293082c8..9eb2cbed9c 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+4990.	[bug]		Prevent a possible NULL reference in pkcs11-keygen.
+			[GL #401]
+
 4988.	[bug]		Don't synthesize NXDOMAIN from NSEC for records under
 			a DNAME. [GL #386]