[Bug 1740323] Re: Enigmail should be updated to version 1.9.9 following Cure53 audit

2018-01-22 Thread Jeremy Nation
Thanks Marc! (And Seth!) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1740323 Title: Enigmail should be updated to version 1.9.9 following Cure53 audit To manage notifications about this bug go

[Bug 1740323] Re: Enigmail should be updated to version 1.9.9 following Cure53 audit

2018-01-22 Thread Marc Deslauriers
I just published updates for this. Thanks. ** Changed in: enigmail (Ubuntu Trusty) Status: Confirmed => Fix Released ** Changed in: enigmail (Ubuntu Xenial) Status: Confirmed => Fix Released ** Changed in: enigmail (Ubuntu Artful) Status: Confirmed => Fix Released -- You

[Bug 1740323] Re: Enigmail should be updated to version 1.9.9 following Cure53 audit

2018-01-19 Thread Marc Deslauriers
Untested updates available here: https://launchpad.net/~ubuntu-security- proposed/+archive/ubuntu/ppa/+packages I will publish them next week. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1740323

[Bug 1740323] Re: Enigmail should be updated to version 1.9.9 following Cure53 audit

2018-01-19 Thread Marc Deslauriers
** Changed in: enigmail (Ubuntu Trusty) Assignee: (unassigned) => Marc Deslauriers (mdeslaur) ** Changed in: enigmail (Ubuntu Xenial) Assignee: (unassigned) => Marc Deslauriers (mdeslaur) ** Changed in: enigmail (Ubuntu Artful) Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

[Bug 1740323] Re: Enigmail should be updated to version 1.9.9 following Cure53 audit

2018-01-19 Thread Marc Deslauriers
** Also affects: enigmail (Ubuntu Artful) Importance: Undecided Status: New ** Also affects: enigmail (Ubuntu Bionic) Importance: Undecided Status: Incomplete ** Also affects: enigmail (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: enigmail

[Bug 1740323] Re: Enigmail should be updated to version 1.9.9 following Cure53 audit

2018-01-19 Thread Jeremy Nation
Does that mean you're not going to do a stable release update? Is there something wrong with the package from Debian? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1740323 Title: Enigmail should be

[Bug 1740323] Re: Enigmail should be updated to version 1.9.9 following Cure53 audit

2018-01-18 Thread Seth Arnold
Thanks Jeremy; the 'incomplete' status just indicates that we're currently waiting on a community member to provide us with a debdiff for sponsorship. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1740323] Re: Enigmail should be updated to version 1.9.9 following Cure53 audit

2018-01-18 Thread Jeremy Nation
I asked in the original bug report to have Enigmail updated to 1.9.9. Posteo, one of the sponsors of the audit, wrote at https://posteo.de/en/blog/security-warning-for-thunderbird-users-and- enigmail-users-vulnerabilities-threaten-confidentiality-of-communication : "For Enigmail users: * Update

[Bug 1740323] Re: Enigmail should be updated to version 1.9.9 following Cure53 audit

2018-01-18 Thread Seth Arnold
Hi Jeremy, unfortunately we cannot just fake-sync enigmail from Debian to address this issue; the candidates for fake-syncing are the entries with 'sync' in the 'Status' column on http://people.canonical.com /~ubuntu-security/d2u/ The quickest and easiest way to get enigmail updated is to prepare

[Bug 1740323] Re: Enigmail should be updated to version 1.9.9 following Cure53 audit

2018-01-18 Thread Jeremy Nation
Enigmail is already updated to 1.9.9 in Debian stable, see https://packages.debian.org/stretch/enigmail. The wiki page you linked says you can "request a sync from Debian" to fix security problems. Can you do that here? -- You received this bug notification because you are a member of Ubuntu

[Bug 1740323] Re: Enigmail should be updated to version 1.9.9 following Cure53 audit

2018-01-16 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is