diff --git a/doc/userguide/upgrade.rst b/doc/userguide/upgrade.rst
index d378df0b6b..0c8b1be15a 100644
--- a/doc/userguide/upgrade.rst
+++ b/doc/userguide/upgrade.rst
@@ -152,6 +152,9 @@ Major changes
   ``app-layer.protocols.ssh.encryption-handling`` to ``bypass`` (while also
   setting ``app-layer.protocols.tls.encryption-handling`` to ``bypass`` and
   ``stream.bypass`` to ``true``).
+- Spaces are accepted in HTTP1 URIs instead of in the protocol version. That is:
+  `GET /a b HTTP/1.1` gets now URI as `/a b` and protocol as `HTTP/1.1` when
+  it used to be URI as `/a` and protocol as `b HTTP/1.1`
 
 Removals
 ~~~~~~~~
@@ -202,9 +205,6 @@ Major changes
   <https://forum.suricata.io/t/my-traffic-gets-blocked-after-upgrading-to-suricata-7>`_.
 - New protocols enabled by default: bittorrent-dht, quic, http2.
 - The telnet protocol is also enabled by default, but only for the ``app-layer``.
-- Spaces are accepted in HTTP1 URIs instead of in the protocol version. That is:
-  `GET /a b HTTP/1.1` gets now URI as `/a b` and protocol as `HTTP/1.1` when
-  it used to be URI as `/a` and protocol as `b HTTP/1.1`
 
 Security changes
 ~~~~~~~~~~~~~~~~