How to downgrade to Iceweasel 28?

Henrik Ahlgren pablo at seestieto.com
Wed Apr 30 19:14:06 UTC 2014


On Wed, Apr 30, 2014 at 08:30:35PM +0200, Carsten Schoenert wrote:
> you will find all old versions on snapshot.debian.net
> 
>   http://snapshot.debian.org/package/iceweasel/28.0-1/#iceweasel_28.0-1

Please do keep in mind however, that iceweasel 29 fixes the following
security issues:

Fixes for mfsa2014-{34,36-39,41-44,46-47}, almost known as:
    CVE-2014-1518, CVE-2014-1519, CVE-2014-1522, CVE-2014-1523,
    CVE-2014-1525, CVE-2014-1528, CVE-2014-1529, CVE-2014-1530,
    CVE-2014-1531, CVE-2014-1532, CVE-2014-1526.

Of those, 34, 39, 42, 44, and 46 are rated 'critical' by Mozilla
("Vulnerability can be used to run attacker code and install software,
requiring no user interaction beyond normal browsing") and 36, 38, 41,
43 and 47 are rated 'high'. In other words, I would not keep using
iceweasel 28 for accessing public internet sites anymore.




More information about the pkg-mozilla-maintainers mailing list