Update CHANGES.txt for commit of HADOOP 12413 to 2.7.3 and 2.6.3

(cherry picked from commit 74a9a51886c4379eefa539912932bfb99d5fd883)

hadoop-common-project/hadoop-common/CHANGES.txt

@@ -276,9 +276,6 @@ Release 2.8.0 - UNRELEASED
     HADOOP-12324. Better exception reporting in SaslPlainServer.
     (Mike Yoder via stevel)
 
-    HADOOP-12413. AccessControlList should avoid calling getGroupNames in
-    isUserInList with empty groups. (Zhihai Xu via cnauroth)
-
     HADOOP-12404. Disable caching for JarURLConnection to avoid sharing
     JarFile with other users when loading resource from URL in Configuration
     class. (zxu)
@@ -806,6 +803,9 @@ Release 2.7.3 - UNRELEASED
 
   IMPROVEMENTS
 
+    HADOOP-12413. AccessControlList should avoid calling getGroupNames in
+    isUserInList with empty groups. (Zhihai Xu via cnauroth)
+
   OPTIMIZATIONS
 
   BUG FIXES
@@ -1621,6 +1621,9 @@ Release 2.6.3 - UNRELEASED
 
   IMPROVEMENTS
 
+    HADOOP-12413. AccessControlList should avoid calling getGroupNames in
+    isUserInList with empty groups. (Zhihai Xu via cnauroth)
+
   OPTIMIZATIONS
 
   BUG FIXES