diff --git a/NEWS b/NEWS
index 1af539a4..1ca7c037 100644
--- a/NEWS
+++ b/NEWS
@@ -3,13 +3,13 @@ procps-ng-3.3.15
   * library: Increment to 8:0:1
     No removals, no new functions
     Changes: slab and pid structures
-  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
-  * pgrep: Remove >15 warning as comm can be longer        issue #92
-  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
   * library: Just check for SIGLOST and don't delete it    issue #93
   * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
   * library: Use size_t for alloc functions                CVE-2018-1126
   * library: Increase comm size to 64
+  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
+  * pgrep: Remove >15 warning as comm can be longer        issue #92
+  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
   * ps: Increase command name selection field to 64
   * top: Don't use cwd for location of config              CVE-2018-1122