update CHANGELOG for v1.10.8

related to #1992

CHANGELOG.md

@@ -1,5 +1,12 @@
 # Nokogiri Changelog
 
+## 1.10.8 / 2020-02-10
+
+### Security
+
+[MRI] Pulled in upstream patch from libxml that addresses CVE-2020-7595. Full details are available in [#1992](https://github.com/sparklemotion/nokogiri/issues/1992). Note that this patch is not yet (as of 2020-02-10) in an upstream release of libxml.
+
+
 ## 1.10.7 / 2019-12-03
 
 ### Bug
@@ -23,6 +30,7 @@
 * CVE-2019-13117
 * CVE-2019-13118
 * CVE-2019-18197
+* CVE-2019-19956
 
 More details are available at #1943.