[Bug 1740323] Re: Enigmail should be updated to version 1.9.9 following Cure53 audit

[Seth Arnold]

Hi Jeremy, unfortunately we cannot just fake-sync enigmail from Debian
to address this issue; the candidates for fake-syncing are the entries
with 'sync' in the 'Status' column on http://people.canonical.com
/~ubuntu-security/d2u/

The quickest and easiest way to get enigmail updated is to prepare a
debdiff with cherry-picked patches that address security issues applied
in the Debian packaging, and documented in the debian/changelog.

An update to a wholly new version is possible but would be best served
by the Stable Release Update process
https://wiki.ubuntu.com/StableReleaseUpdates

Thanks

-- 
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to enigmail in Ubuntu.
https://bugs.launchpad.net/bugs/1740323

Title:
  Enigmail should be updated to version 1.9.9 following Cure53 audit

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/enigmail/+bug/1740323/+subscriptions