more changelog entries from the 0.6 cycle

#1345 should land before this is merged.
Should we make clear that these are bugs with OpenSSL and CommonCrypt. "Work around three GCM related bugs in CommonCrypto and OpenSSL"?