Update CHANGELOG.md for 8.16.5

CHANGELOG.md

@@ -2,6 +2,13 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.
 
+## 8.16.5 (2017-02-14)
+
+- Patch Asciidocs rendering to block XSS.
+- Fix XSS vulnerability in SVG attachments.
+- Prevent the GitHub importer from assigning labels and comments to merge requests or issues belonging to other projects.
+- Patch XSS vulnerability in RDOC support.
+
 ## 8.16.4 (2017-02-02)
 
 - Support non-ASCII characters in GFM autocomplete. !8729

changelogs/unreleased/asciidocs-xss-patch.yml

----
-title: Patch Asciidocs rendering to block XSS
-merge_request:
-author:

changelogs/unreleased/fix-xss-svg.yml

----
-title: Fix XSS vulnerability in SVG attachments
-merge_request:
-author:

changelogs/unreleased/labels-assigned-to-wrong-project.yml

----
-title: Prevent the GitHub importer from assigning labels and comments to merge requests or issues belonging to other projects.
-merge_request:
-author:

changelogs/unreleased/patch-rdoc-xss.yml

----
-title: Patch XSS vulnerability in RDOC support
-merge_request:
-author: