Update CHANGELOG.md

Security links return 404, missing /advisory in URL