Update ChangeLog for fix to #836
diff --git a/ChangeLog b/ChangeLog
index 565ea29..ec91259 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -5,6 +5,10 @@
Features
* Allow comments in test data files.
+Bugfix
+ * Fix memory leak in mbedtls_ssl_set_hostname() when called multiple times.
+ Found by projectgus and jethrogb, #836.
+
= mbed TLS 2.6.0 branch released 2017-08-10
Security
@@ -194,8 +198,6 @@
team. #569 CVE-2017-2784
Bugfix
- * Fix memory leak in mbedtls_ssl_set_hostname() when called multiple times.
- Found by jethrogb, #836.
* Fix output certificate verification flags set by x509_crt_verify_top() when
traversing a chain of trusted CA. The issue would cause both flags,
MBEDTLS_X509_BADCERT_NOT_TRUSTED and MBEDTLS_X509_BADCERT_EXPIRED, to be