Refine dhm_check_range() fix Changelog entry
diff --git a/ChangeLog b/ChangeLog
index ce0e831..3da4a84 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -3,8 +3,8 @@
= mbed TLS x.x.x branch released xxxx-xx-xx
Security
- * Fix dhm_check_range() failing to detect trivial subgroups and essentially
- always returning 0. Reported by prashantkspatil.
+ * Fix dhm_check_range() failing to detect trivial subgroups and potentially
+ leaking 1 bit of the private key. Reported by prashantkspatil.
Bugfix
* Fix ssl_parse_record_header() to silently discard invalid DTLS records