debian/NEWS: adding notes around new security changes

As Mozilla has dropped the SSL 3.0 support and implement a setting for
TLS protocal version fallbacks adding some infos around this into
debian/NEWS and debian/README.Debian.

Thanks to Ralf Jung and kiki coco for some suggestions and corrections.