diff --git a/CHANGES.txt b/CHANGES.txt
index df15548e13..f7c67d2c7d 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -5,7 +5,7 @@
  * Redact security-sensitive information in system_views.settings (CASSANDRA-20856)
 Merged from 4.0:
  * Obsolete expired SSTables before compaction starts (CASSANDRA-19776)
- * Switch lz4-java to at.yawk.lz4 version due to CVE (CASSANDRA-20152)
+ * Switch lz4-java to at.yawk.lz4 version due to CVE (CASSANDRA-21052)
  * Restrict BytesType compatibility to scalar types only (CASSANDRA-20982)
  * Backport fix to nodetool gcstats output for direct memory (CASSANDRA-21037)
  * ArrayIndexOutOfBoundsException with repaired data tracking and counters (CASSANDRA-20871)