web: News about FFmpeg in Debian

Try to shortly summarize where we are now.
web/index: Use HTML entity for the & in Click&Pledge

Found-by: W3C validator
web/security: add CVEs for 2.4.2, 2.3.4, 2.2.9 and 1.2.9