[Pkg-mozext-maintainers] Bug#929363: enigmail: CVE-2019-12269

[Daniel Kahn Gillmor]

On Tue 2019-06-25 22:35:44 +0200, Moritz Mühlenhoff wrote:
> Buster still has 2.0.10, what's the plan for it

I've just filed https://bugs.debian.org/931126 to unblock for buster.

> (and for stretch), should we fix this in older releases?

Given that we're updating thunderbird in stable, yes, we should probably
also update enigmail there.

Do you want to do that as the security team, or should i propose it?

     --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-mozext-maintainers/attachments/20190626/16914e37/attachment.sig>