diff --git a/CHANGES b/CHANGES
index 173e8dbd15..40d25780c8 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5431.	[func]		Reject DS records at the zone apex when loading
+			master files. Log but otherwise ignore attempts to
+			add DS records at the zone apex via UPDATE. [GL #1798]
+
 5430.	[doc]		Update docs - with netmgr we're creating separate
 			socket for each IPv6 interface, just as with IPv4.
 			[GL #1782]