Update CHANGELOG-EE.md for 12.2.5-ee

[ci skip]

CHANGELOG-EE.md

 Please view this file on the master branch, on stable branches it's out of date.
 
+## 12.2.5
+
+### Security (1 change)
+
+- Do not allow creation of projects from group templates if project is not descendant of that group.
+
+
 ## 12.2.4
 
 ### Fixed (1 change)