Install libnss3, libnss3-1d, libnspr4, libnspr4-0d, libsqlite3-0 and sqlite3 from the official squeeze-backports.

This addresses #6496, assuming Iceweasel 24.2.0esr-1+tails1~bpo60+1 is happy
enough with these versions. Then, we can remove these packages from our own
APT repository.

This reverts commits 945796fe
and 6bebc91c.

The APT pinning for linux*3.10* is actually useless, as these packages are not
in Debian testing anymore and will be covered by the general pinning rules that
apply to our own APT repository. Let's keep these lines around so that we don't
forget to adapt them once we move forward to a newer kernel again.

Otherwise, ISO builds fails since a hook of ours tries to get the former in its
newest version (from mozilla.d.n) and we have pinning that gets the later from
official backports, which are not compatible with each other.

It's needed by the latest tails-perl5lib.

The version needed by FF24 is now in there.

A new kernel (3.11.5-1) entered Debian unstable, and we don't want to ship
a different kernel in 0.21 final than what we had in 0.21~rc1 (3.10.11-1).

Some (backported) dependencies of Iceweasel 24 are only available in there.
Also, stop pinning some of these dependencies to backports.d.o, since the
version we need is only at mozilla.d.n.

This will have to be changed to their iceweasel-esr repository once FF24 is the
new ESR.

Revert "Prevent some unwanted packages to be installed at all, rather than uninstalling them later."

This reverts commit 87a2c027.

Conflicts:
	config/chroot_apt/preferences

Setting the pin-priority of some packages to -1, make it impossible to
install them with a canonical `apt-get install $package` command.

Linux 3.9-1 isn't available anymore there.

The 3.8 kernel needs it.

The version from Squeeze does not detect at least Parallels for Mac v.8.

Namely: spice-vdagent, libregexp-common-perl, macchanger, service-wrapper,
libservice-wrapper-java and libservice-wrapper-jni.

Wheezy has the versions we've been installing for a while,
so let's avoid having unstable push a newer one to us uselessly at some point.

Note that at the time of my writing, the versions in sid and in Wheezy are the
same, so this commit is effectively a no-op as of today: it is merely
a safeguard for the future.

Wheezy has the version we've been installing in 0.18~rc1,
while a newer one was uploaded to sid.

Debian sid just got Linux 3.8, and we don't want to switch to a new kernel just
a few days before Tails 0.18 is released.

They were uploaded there, and accordingly removed from sid.

Their APT repository still thinks that stable == Squeeze.

This reverts commit 9852ff01.

This reverts commit 9852ff01.

It's needed for xulrunner 17.

The version in sid is not compatible with FF17.

It's not maintained in Debian anymore, so we now fetch it from our own APT repository.

The main use of iucode-tool in Debian is to only include in the initramfs the
CPU firmware for the currently running CPU. We want firmware for all CPUs, not
only the one we build on.

This much improved new version is effectively maintained, and is nice enough to
avoid displaying dozens of spurious error messages at boot time.

Closes: todo/upgrade_barry_to_fix_error_messages_on_boot

The version in Squeeze does not install in chroots, which breaks Tails ISO build
process (Debian bug #624211).

As decided on todo/monkeysphere_keyserver_policy, because: the implication of
the current settings are not well understood, Monkeysphere is little used in
Tails, and we're not sure anymore it would be our first bet for the web browser
profile with no CA.

Let's keep the various configuration bits (e.g. FoxyProxy, patching MSVA),
though, so that advanced users who are used to have Monkeysphere in Tails just
have to install the package.

This branch is about upgrading Tails to live-boot 3.0~b7-1 and live-config
3.0.12-1, and may not be compatible with any version pushed to sid after the
next Tails freeze.

Let's keep the >>stable pinning for unstable though, it's a sensible fallback
for branches of ours that don't ship custom live-* packages.