Update CHANGELOG.md for 11.4.1

[ci skip]

CHANGELOG.md

@@ -2,6 +2,14 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.
 
+## 11.4.1 (2018-10-23)
+
+### Security (2 changes)
+
+- Fix XSS in merge request source branch name.
+- Prevent SSRF attacks in HipChat integration.
+
+
 ## 11.4.0 (2018-10-22)
 
 ### Security (9 changes)

changelogs/unreleased/51527-xss-in-mr-source-branch.yml

----
-title: Fix XSS in merge request source branch name
-merge_request:
-author:
-type: security

changelogs/unreleased/sh-fix-hipchat-ssrf.yml

----
-title: Prevent SSRF attacks in HipChat integration
-merge_request:
-author:
-type: security