Update CHANGELOG.md for 9.5.9

[ci skip]

CHANGELOG.md

@@ -2,6 +2,14 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.
 
+## 9.5.9 (2017-10-16)
+
+- [SECURITY] Move project repositories between namespaces when renaming users.
+- [SECURITY] Prevent an open redirect on project pages.
+- [SECURITY] Prevent a persistent XSS in user-provided markup.
+- [FIXED] Allow using newlines in pipeline email service recipients. !14250
+- Escape user name in filtered search bar.
+
 ## 9.5.8 (2017-10-04)
 
 - [FIXED] Fixed fork button being disabled for users who can fork to a group.

changelogs/unreleased/37759-also-treat-newlines-as-separator.yml

----
-title: Allow using newlines in pipeline email service recipients
-merge_request: 14250
-author:
-type: fixed

changelogs/unreleased/38126-security-username-change.yml

----
-title: Move project repositories between namespaces when renaming users
-merge_request:
-author:
-type: security

changelogs/unreleased/fix-arbitrary-redirect-vulnerability.yml

----
-title: Prevent an open redirect on project pages
-merge_request:
-author:
-type: security

changelogs/unreleased/rs-sanitize-unicode-in-protocol.yml

----
-title: Prevent a persistent XSS in user-provided markup
-merge_request:
-author:
-type: security

changelogs/unreleased/winh-search-bar-xss-9-5.yml

----
-title: Escape user name in filtered search bar
-merge_request:
-author: