Bug#511477: iceape: Shouldn't release with Lenny

[Moritz Muehlenhoff]

Package: iceape
Severity: serious

The Debian Mozilla maintainers don't have the resources to support Iceape
over the timeframe of Lenny security support. Other people have been asked
on debian-devel to help out, but with no effect.
(http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505565#10)

The problem of dropping Iceape is that it provides a Xulrunner -dev package,
iceape-dev, based on Xulrunner 1.8, while Xulrunner in Lenny (the one that
Iceweasel uses) is based on 1.9, so it can't be dropped easily, since the
following seventeen packages build-depend on iceape-dev:

vlc
gcj-4.2
gtk-vnc
openoffice.org
gnome-chemistry-utils
mozilla-traybiff
gcj-4.3
icedtea-gcjwebplugin
rhythmbox
cacao-oj6
totem
mplayerplug-in
classpath
eclipse
mozilla-bonobo
openjdk-6
gecko-mediaplayer

Two approaches to resolve this have been proposed: 

1. Providing the -dev package from Icedove (which is also based on Xul 1.8)
2. Dropping  all binary packages from Iceape except the iceape-dev package.
   This option has the downside that there would still be the need for updates,
   but they would only be made on a best effort basis, since they're less
   severe (the respective components are mostly used for plugins or xpcom
   components and the majority of web browser attacks doesn't apply). 

(3. Find a volunteer, who builds the updates for Iceape (the patches are
    provided by Red Hat and Canonical), but that hasn't worked out so far.

Cheers,
        Moritz

-- System Information:
Debian Release: 5.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-686 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=de_DE.ISO-8859-15 at euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash

Versions of packages iceape depends on:
pn  iceape-browser                <none>     (no description available)
pn  iceape-mailnews               <none>     (no description available)

Versions of packages iceape recommends:
pn  iceape-chatzilla              <none>     (no description available)

Versions of packages iceape suggests:
pn  iceape-calendar               <none>     (no description available)