diff --git a/CHANGELOG-4.4.md b/CHANGELOG-4.4.md
index 4de4989aab..70feb9ba3c 100644
--- a/CHANGELOG-4.4.md
+++ b/CHANGELOG-4.4.md
@@ -7,6 +7,44 @@ in 4.4 minor versions.
 To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash
 To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v4.4.0...v4.4.1
 
+* 4.4.6 (2020-03-27)
+
+ * bug #36169 [HttpKernel] fix locking for PHP 7.4+ (nicolas-grekas)
+ * bug #36175 [Security/Http] Remember me: allow to set the samesite cookie flag (dunglas)
+ * bug #36173 [Http Foundation] Fix clear cookie samesite (guillbdx)
+ * bug #36176 [Security] Check if firewall is stateless before checking for session/previous session (koenreiniers)
+ * bug #36149 [Form] Support customized intl php.ini settings (jorrit)
+ * bug #36172 [Debug] fix for PHP 7.3.16+/7.4.4+ (nicolas-grekas)
+ * bug #36151 [Security] Fixed hardcoded value of SODIUM_CRYPTO_PWHASH_MEMLIMIT_INTERACTIVE (lyrixx)
+ * bug #36141 Prevent warning in proc_open() (BenMorel)
+ * bug #36143 [FrameworkBundle] Fix Router Cache (guillbdx)
+ * bug #36103 [DI] fix preloading script generation (nicolas-grekas)
+ * bug #36118 [Security/Http] don't require the session to be started when tracking its id (nicolas-grekas)
+ * bug #36108 [DI] Fix CheckTypeDeclarationPass (guillbdx)
+ * bug #36121 [VarDumper] fix side-effect by not using mt_rand() (nicolas-grekas)
+ * bug #36073 [PropertyAccess][DX] Improved errors when reading uninitialized properties (HeahDude)
+ * bug #36063 [FrameworkBundle] start session on flashbag injection (William Arslett)
+ * bug #36031 [Console] Fallback to default answers when unable to read input (ostrolucky)
+ * bug #36083 [DI][Form] Fixed test suite (TimeType changes & unresolved merge conflict) (wouterj)
+ * bug #36026 [Mime] Fix boundary header (guillbdx)
+ * bug #36020 [Form] ignore microseconds submitted by Edge (xabbuh)
+ * bug #36038 [HttpClient] disable debug log with curl 7.64.0 (nicolas-grekas)
+ * bug #36041 fix import from config file using type: glob (Tobion)
+ * bug #35987 [DoctrineBridge][DoctrineExtractor] Fix wrong guessed type for "json" type (fancyweb)
+ * bug #35949 [DI] Fix container lint command when a synthetic service is used in an expression (HypeMC)
+ * bug #36023 [HttpClient] fix requests to hosts that idn_to_ascii() cannot handle (nicolas-grekas)
+ * bug #35938 [Form] Handle false as empty value on expanded choices (fancyweb)
+ * bug #36030 [SecurityBundle] Minor fix in LDAP config tree builder (HeahDude)
+ * bug #35993 Remove int return type from FlattenException::getCode (wucdbm)
+ * bug #36004 [Yaml] fix dumping strings containing CRs (xabbuh)
+ * bug #35982 [DI] Fix XmlFileLoader bad error message (przemyslaw-bogusz)
+ * bug #35957 [DI] ignore extra tags added by autoconfiguration in PriorityTaggedServiceTrait (nicolas-grekas)
+ * bug #35937 Revert "bug symfony#28179 [DomCrawler] Skip disabled fields processing in Form" (dmaicher)
+ * bug #35928 [Routing] Prevent localized routes _locale default & requirement from being overridden (fancyweb)
+ * bug #35912 [FrameworkBundle] register only existing transport factories (xabbuh)
+ * bug #35899 [DomCrawler] prevent deprecation being triggered from assertion (xabbuh)
+ * bug #35910 [SecurityBundle] Minor fixes in configuration tree builder (HeahDude)
+
 * 4.4.5 (2020-02-29)
 
  * bug #35781 [Form] NumberToLocalizedStringTransformer return int if scale = 0 (VincentLanglet)