diff --git a/ChangeLog b/ChangeLog
index 8841a85bd..458a90f5b 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -71,6 +71,7 @@ Changes
      Contributed by Peter Kolbus (Garmin).
    * Change wording in the `mbedtls_ssl_conf_max_frag_len()`'s documentation to
      improve clarity. Fixes #2258.
+   * Replace multiple uses of MD2 by SHA-256 in X.509 test suite. Fixes #821.
 
 = mbed TLS 2.17.0 branch released 2019-03-19
 
@@ -155,7 +156,6 @@ Changes
      been disabled for lack of a sufficiently recent version of GnuTLS on the CI.
    * Ciphersuites based on 3DES now have the lowest priority by default when
      they are enabled.
-   * Replace multiple uses of MD2 by SHA-256 in X.509 test suite. Fixes #821.
 
 = mbed TLS 2.16.0 branch released 2018-12-21