Update CHANGELOG.md for 10.5.3

CHANGELOG.md

@@ -2,6 +2,13 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.
 
+## 10.5.3 (2018-03-01)
+
+### Security (1 change)
+
+- Ensure that OTP backup codes are always invalidated.
+
+
 ## 10.5.2 (2018-02-25)
 
 ### Fixed (7 changes)

changelogs/unreleased/sh-fix-otp-backup-code-invalidation.yml

----
-title: Ensure that OTP backup codes are always invalidated
-merge_request:
-author:
-type: security