diff --git a/ChangeLog-5.php b/ChangeLog-5.php
index c299557d3..5ac424e68 100644
--- a/ChangeLog-5.php
+++ b/ChangeLog-5.php
@@ -208,17 +208,17 @@ site_header("PHP 5 ChangeLog", array("current" => "docs", "css" => array("change
 <section class="version" id="5.5.38"><!-- {{{ 5.5.38 -->
 <h3>Version 5.5.38</h3>
 <b><?php release_date('21-Jul-2016'); ?></b>
-<ul><li>BZip2:
-<ul>
-  <li><?php bugfix(72613); ?> (Inadequate error handling in bzread()). (CVE-2016-5399)</li>
-</ul></li>
-<li>Core:
+<ul><li>Core:
 <ul>
   <li><?php bugfix(70480); ?> (php_url_parse_ex() buffer overflow read). (CVE-2016-6288)</li>
   <li><?php bugfix(72513); ?> (Stack-based buffer overflow vulnerability in virtual_file_ex). (CVE-2016-6289)</li>
   <li><?php bugfix(72562); ?> (Use After Free in unserialize() with Unexpected Session Deserialization). (CVE-2016-6290)</li>
   <li><?php bugfix(72573); ?> (HTTP_PROXY is improperly trusted by some PHP libraries and applications). (CVE-2016-5385)</li>
 </ul></li>
+<li>BZip2:
+<ul>
+  <li><?php bugfix(72613); ?> (Inadequate error handling in bzread()). (CVE-2016-5399)</li>
+</ul></li>
 <li>EXIF:
 <ul>
   <li><?php bugfix(72603); ?> (Out of bound read in exif_process_IFD_in_MAKERNOTE). (CVE-2016-6291)</li>