Update CHANGELOG.md for 12.4.4

[ci skip]

CHANGELOG.md

@@ -367,6 +367,21 @@ entry.
 - Change selects from default browser style to custom style.
 
 
+## 12.4.4
+
+### Security (9 changes)
+
+- Check permissions before showing a forked project's source.
+- Encrypt application setting tokens.
+- Update Workhorse and Gitaly to fix a security issue.
+- Hide commit counts from guest users in Cycle Analytics.
+- Limit potential for DNS rebind SSRF in chat notifications.
+- Fix 500 error caused by invalid byte sequences in links.
+- Ensure are cleaned by ImportExport::AttributeCleaner.
+- Remove notes regarding Related Branches from Issue activity feeds for guest users.
+- Escape namespace in label references to prevent XSS.
+
+
 ## 12.4.3
 
 ### Fixed (2 changes)