Fix order of sections in the ChangeLog
diff --git a/ChangeLog b/ChangeLog
index ed7e8a6..017cb47 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -2,6 +2,11 @@
= mbed TLS 2.7.x branch released xxxx-xx-xx
+Features
+ * Add MBEDTLS_REMOVE_3DES_CIPHERSUITES to allow removing 3DES ciphersuites
+ from the default list (enabled by default). See
+ https://sweet32.info/SWEET32_CCS16.pdf.
+
Bugfix
* Run the AD too long test only if MBEDTLS_CCM_ALT is not defined.
Raised as a comment in #1996.
@@ -10,11 +15,6 @@
* Reduce stack usage of `mpi_write_hlp()` by eliminating recursion.
Fixes #2190.
-Features
- * Add MBEDTLS_REMOVE_3DES_CIPHERSUITES to allow removing 3DES ciphersuites
- from the default list (enabled by default). See
- https://sweet32.info/SWEET32_CCS16.pdf.
-
Changes
* Include configuration file in all header files that use configuration,
instead of relying on other header files that they include.