diff --git a/changes/bug17027-reject-private-bind-port b/changes/bug17027-reject-private-bind-port
index 7d8f023d2d..e0c222a1cf 100644
--- a/changes/bug17027-reject-private-bind-port
+++ b/changes/bug17027-reject-private-bind-port
@@ -1,5 +1,6 @@
   o Minor bugfixes (security, exit policies):
-    - ExitPolicyRejectPrivate rejects more private addresses by default:
-      * the relay's outbound bind addresses (if configured), and
-      * the relay's configured port addresses (such as ORPort and DirPort).
+    - ExitPolicyRejectPrivate rejects more private addresses by default.
+      Specifically, it rejects
+      the relay's outbound bind addresses (if configured), and
+      the relay's configured port addresses (such as ORPort and DirPort).
       Fixes bug 17027; bugfix on 0.2.0.11-alpha. Patch by "teor".