Package: mozilla
Severity: serious

Mozilla applications are known to require a lot of maintainance, and
this is particularly true for the huge Mozilla suite. The 6 Mozilla
updates since Sarge's release should show that, each fixing an average
of about 10 security vulnerabilities that got CVE IDs assigned. The
difficulty of keeping Mozilla secure is expected to increase largely due
to the end of upstream support, already effective. Considering the
security track up to now in Sarge, and the important security drop
expected, even if the grave bugs currently opened against Mozilla suite
are resolved, the suite will most likely get to a point where it will be
better to remove it from stable Etch than keeping it, which is not
desirable. Instead, as there are alternatives to the Mozilla suite,
packages depending on Mozilla should find alternatives or be removed,
and then the Mozilla suite should be removed before Etch's release.

Takuo, please reassign this to ftp.d.o unless you disagree.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to