Update CHANGELOG.md for 13.3.4

[ci skip]

CHANGELOG.md

@@ -2,6 +2,13 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.
 
+## 13.3.4 (2020-09-02)
+
+### Security (1 change)
+
+- Protect OAuth endpoints from brute force/password stuffing.
+
+
 ## 13.3.3 (2020-09-02)
 
 ### Security (23 changes, 1 of them is from the community)

changelogs/unreleased/security-205-dblessing-oauth-token-brute-force.yml

----
-title: Protect OAuth endpoints from brute force/password stuffing
-merge_request:
-author:
-type: security