mention fixed CVEs in the changelog
add symbolic links from the standard lib*.so library names to the suffixed ones
update changelog
drop the now obsolete explanation about pkg-config from README.Debian