as debian releases are frozen on a long-term basis, software in the frozen stable releases needs to be patched for any newly discovered security issue. under the revised guidelines, in order to use the firefox name, approval from the mozilla corporation would have been required for all security patches, but the debian project felt it could not put its security in the hands of an external corporation in that manner.