diff --git a/ChangeLog b/ChangeLog
index acc41795587..95bc2c46694 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -7,22 +7,24 @@
 - Localization to Chinese
 - Send RouterInfo update for long live sessions
 - Explicit ipv6 ranges of known tunnel brokers for MTU detection
-- Always send Connection: close and strip out Keep-Alive for server HTTP tunnel
+- Always send "Connection: close" and strip out Keep-Alive for server HTTP tunnel
 - Show ports for all transports in web console
-- Translation of webconsole site title 
-- Support for Windows ProgramData path when running as service 
+- Translation of webconsole site title
+- Support for Windows ProgramData path when running as service
 - Ability to turn off address book
 - Handle signals TSTP and CONT to stop and resume network
 ### Changed
 - Case insensitive headers for server HTTP tunnel
-- Do not show 'Address registration' line if LeaseSet is encrypted 
+- Do not show 'Address registration' line if LeaseSet is encrypted
 - SSU2 transports have higher priority than SSU
-- Disable ElGamal precalculated table if no SSU 
+- Disable ElGamal precalculated table if no SSU
 - Deprecate limits.ntcpsoft, limits.ntcphard and limits.ntcpthreads config options
 - SSU2 is enabled and SSU is disabled by default for new installations
 ### Fixed
+- Typo with Referer header name in HTTP proxy
 - Can't handle garlic message from an exploratory tunnel
 - Incorrect encryption key for exploratory lookup reply
+- Bound checks issues in LeaseSets code
 - MTU detection on Windows
 - Crash on stop of active server tunnel
 - Send datagram to wrong destination in SAM