Security fixes

• Upgrade Tor to 0.2.7.6-1~d70.wheezy+1+zerotracepen1.

• Upgrade Tor Browser to 5.0.5. (Closes: #10751)

• Upgrade LibreOffice to 1:3.5.4+dfsg2-0+deb7u5.

• Upgrade krb5-based packages to 1.10.1+dfsg-5+deb7u6.

• Upgrade Linux to 3.16.7-ckt11-1+deb8u6.

• Upgrade wpasupplicant to 1.0-3+deb7u3.

• Upgrade libpng12-0 to 1.2.49-1+deb7u1.

• Upgrade openjdk-7 to 7u91-2.6.3-1~deb7u1.

• Upgrade libnspr4 to 2:4.9.2-1+deb7u3

• Upgrade dpkg to 1.16.17.

• Upgrade gnutls26 to 2.12.20-8+deb7u4.

• Upgrade Icedove to 1:38.0.1-1~deb7u1.

• Upgrade OpenSSL to 1.0.1e-2+deb7u18.

• Bugfixes

• Upgrade to Electrum 2.5.4-2~d70.wheezy+1+zerotracepen1. Now Electrum
  should work again. Note that the documentation has not been
  adapted to the slight changes in the Electrum account setup
  wizard yet.

• Minor improvements

• Upgrade I2P to 0.9.23-2~deb7u+1.

• Rebase our patch against the Tor Browser AppArmor profile on top
  of the one shipped in torbrowser-launcher 0.2.1-2.

• Warn if the claws-mail persistence is enabled and contains a
  Claws Mail configuration when starting icedove. (Closes: #10458)

• Replace the Claws Mail GNOME launcher with Icedove. (Closes:

  10739)

• Remove the Claws Mail persistence feature from the Persistence
  Assistant. (Closes: #10742)

• Build system

• Simplify ISO image naming rules by using the base rule we use
  for Jenkins all the time, except when building from a tag
  (i.e. building a release). (Closes: #10349)

• Test suite

• Lower the waiting time for USB installation in the test suite.
  So far we were waiting up to one hour, which is just the same as
  our Jenkins inactivity timeout, so in practice when Zero Trace Pen
  Installer fails and displays an error message, instead of
  reporting that the job failed (which is the point of the
  exercise) we abort the job due to this timeout which
  communicates less clearly that there's probably a bug. (Closes:

  10718)

• Remove the check for the sound icon in the systray in the
  Windows Camouflage tests. (Closes: #10493)

• Retry running whois when "LIMIT EXCEEDED" is in its output for
  increased robustness. (Closes: #10523)

• Make Seahorse tests more robust. (Closes: #9095, #10501)

• Make the handling of Pidgin's account manager more robust.
  (Closes: #10506)