Update CHANGELOG-EE.md for 12.3.7-ee

[ci skip]

CHANGELOG-EE.md

@@ -236,6 +236,18 @@ Please view this file on the master branch, on stable branches it's out of date.
 - Docs for protected branch code owner approval API. !17132
+## 12.3.7
+
+### Security (6 changes)
+
+- Protect Jira integration endpoints from guest users.
+- Fix private comment Elasticsearch leak on project search scope.
+- Filter snippet search results by feature visibility.
+- Hide AWS secret on Admin Integration page.
+- Fail pull mirror when mirror user is blocked.
+- Prevent IDOR when adding users to protected environments.
+
+
 ## 12.3.4
 ### Fixed (2 changes)

ee/changelogs/unreleased/security-2940-fix-jira-integration-endpoints.yml

----
-title: Protect Jira integration endpoints from guest users
-merge_request:
-author:
-type: security

ee/changelogs/unreleased/security-33712.yml

----
-title: Fix private comment Elasticsearch leak on project search scope
-merge_request:
-author:
-type: security

ee/changelogs/unreleased/security-36464-snippet.yml

----
-title: Filter snippet search results by feature visibility
-merge_request:
-author:
-type: security

ee/changelogs/unreleased/security-aws-secret-key-2937.yml

----
-title: Hide AWS secret on Admin Integration page
-merge_request:
-author:
-type: security

ee/changelogs/unreleased/security-fix-blocked-user-pull-mirror.yml

----
-title: Fail pull mirror when mirror user is blocked
-merge_request:
-author:
-type: security

ee/changelogs/unreleased/security-idor-protected-environment-users.yml

----
-title: Prevent IDOR when adding users to protected environments
-merge_request:
-author:
-type: security