Rework a little bit the 0.22~rc1 changelog, mainly because it's the basis for 0.22's one.

debian/changelog

@@ -5,6 +5,8 @@ tails (0.22~rc1) unstable; urgency=low
     - Stop migrating persistence configuration and access rights. Instead,
       disable all persistence configuration files if the mountpoint has wrong
       access rights (Closes: #6413).
+    - Upgrade to NSS 3.15.3 that fixes a few serious security issues affecting
+      the browser, such as CVE-2013-1741, CVE-2013-5605 and CVE-2013-5606.
 
   * Major improvements
     - Switch to Iceweasel 24 (Closes: #6370).
@@ -20,13 +22,13 @@ tails (0.22~rc1) unstable; urgency=low
         the shortest and sanest path to fixing the check issue, because the
         remote Tor check is broken" seems to simply disable this check.
         Patch submitted upstream as Tor#10216.
-    - Install Linux 3.11-2 from Debian testing.
+    - Install Linux 3.11-2 (3.11.8-1) from Debian testing.
     - Prepare incremental upgrades to be the next default way to upgrade Tails,
       on point-releases at least.
 
   * Bugfixes
-    - Disable DPMS screen blanking (Closes: #5617).
     - Deny X authentication only after Vidalia exits (Closes: #6389).
+    - Disable DPMS screen blanking (Closes: #5617).
     - Fix checking of the persistent volume's ACL.
     - Sanitize more IP and MAC addresses in bug reports (Closes: #6391).
     - Do not fail USB upgrade when the "tmp" directory exists on the