Surely you won’t be able to keep up continuously backporting new security fixes to old, unsupported versions.
We’re still doing that for 3.0 in Lenny. It should still be possible.
PS: How soon is soon? I haven’t seen it at debian.mozilla.net yet :)
As soon as some time this week, after the next round of security updates today/tomorrow.
Update: The next round of security updates was on thursday/friday, and there were a few issues, mostly due to the switch to gcc 4.6, to deal with, so the Iceweasel Aurora package is going to be slightly delayed.