fix addition of entry for CVE-2009-2412


git-svn-id: https://svn.apache.org/repos/asf/apr/apr-util/branches/1.3.x@800751 13f79535-47bb-0310-9956-ffa450edef68
diff --git a/CHANGES b/CHANGES
index b67d989..e9ddc04 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,11 +1,11 @@
                                                      -*- coding: utf-8 -*-
 Changes with APR-util 1.3.9
 
-  *) Make sure that "make check" is used in the RPM spec file, so that
   *) SECURITY: CVE-2009-2412 (cve.mitre.org)
      Fix overflow in rmm, where size alignment was taking place.
      [Matt Lewis <mattlewis@google.com>, Sander Striker]
 
+  *) Make sure that "make check" is used in the RPM spec file, so that
      the crypto, dbd and dbm tests pass. [Graham Leggett]
 
   *) Make sure the mysql version of dbd_mysql_get_entry() respects the