hi,regarding the security problems of firefox in stable i have following questions:
1) why wasnt there a DSA about this problem ?2) why wasnt firefox 1.04 removed off the package list immediately if the problem couldnt be fixed in time ? IMHO keeping firefox 1.04 for about 3 months gives a wrong impression of a secure system.
3) are there any other packages with known security holes in stable ? TIA