Update CHANGELOG.md for 11.4.6

[ci skip]

CHANGELOG.md

@@ -2,6 +2,13 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.
+## 11.4.6 (2018-11-18)
+
+### Security (1 change)
+
+- Escape user fullname while rendering autocomplete template to prevent XSS.
+
+
 ## 11.4.5 (2018-11-04)
 ### Fixed (4 changes, 1 of them is from the community)

changelogs/unreleased/security-11-4-2717-xss-username-autocomplete.yml

----
-title: Escape user fullname while rendering autocomplete template to prevent XSS
-merge_request:
-author:
-type: security