CHANGELOG.md: Update for 1.4.0 release.

This is a cherry-pick of 5a580d470262323f3764158c999e3144b89a6dd2 from
the 1.x branch with minor fixups to retain the 'Unreleased' bits.

Signed-off-by: Philip Tricca <philip.b.tricca@intel.com>
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3cb984b..0b48ab0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,17 @@
 ### Fixed
 - Wrong return type for Tss2_Sys_Finalize (API break).
 
+## [1.4.0] - 2018-03-02
+### Added
+- Attached Component commands from the last public review spec.
+### Fixed
+- Essential files missing from release tarballs are now included.
+- Version string generation has been moved from configure.ac to the
+bootstrap script. It is now stored in a file named `VERSION` that is
+shipped in the release tarball.
+- We've stopped shipping the built man page for InitSocketTcti.3 and now
+ship the source.
+
 ## [1.3.0] - 2017-12-07
 ### Added
 - Implementation of the EncryptDecrypt2 command.