diff --git a/ChangeLog b/ChangeLog
index d4e754b71..c67157128 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -32,6 +32,16 @@ Features
      This feature is disabled by default. See its API documentation in
      config.h for additional steps you have to take when enabling it.
 
+API Changes
+   * The following functions in the random generator modules have been
+     deprecated and replaced as shown below. The new functions change
+     the return type from void to int to allow returning error codes when
+     using MBEDTLS_<MODULE>_ALT for the underlying AES or message digest
+     primitive. Fixes #1798.
+     mbedtls_ctr_drbg_update() -> mbedtls_ctr_drbg_update_ret()
+     mbedtls_hmac_drbg_update() -> mbedtls_hmac_drbg_update_ret()
+   * Extend ECDH interface to enable alternative implementations.
+
 New deprecations
    * Deprecate mbedtls_ctr_drbg_update and mbedtls_hmac_drbg_update
      in favor of functions that can return an error code.
@@ -52,16 +62,6 @@ Bugfix
    * Fix double initialization of ECC hardware that made some accelerators
      hang.
 
-API Changes
-   * The following functions in the random generator modules have been
-     deprecated and replaced as shown below. The new functions change
-     the return type from void to int to allow returning error codes when
-     using MBEDTLS_<MODULE>_ALT for the underlying AES or message digest
-     primitive. Fixes #1798.
-     mbedtls_ctr_drbg_update() -> mbedtls_ctr_drbg_update_ret()
-     mbedtls_hmac_drbg_update() -> mbedtls_hmac_drbg_update_ret()
-   * Extend ECDH interface to enable alternative implementations.
-
 = mbed TLS 2.14.0 branch released 2018-11-19
 
 Security