Bug#945066: buster-pu: package enigmail/2:2.1.3+ds1-4~deb10u1

["Adam D. Barratt" <adam@adam-barratt.org.uk>]

On 2019-11-22 12:15, Jonas Meurer wrote:
> Hello,
>
> On Tue, 19 Nov 2019 17:11:05 +0800 Daniel Kahn Gillmor
> <dkg@fifthhorseman.net> wrote:
> > thunderbird 68 is now in buster-new and in security.debian.org
> >
> > sadly, the enigmail upstream versions are closely tied to the
> > thunderbird versions.  (enigmail 2.0.x works with TB 60, but 2.1.x 
> > works
> > with TB 68)  See https://bugs.debian.org/945014 for more details.
> >
> > I'm proposing to upgrade the version of enigmail in buster to match 
> > the
> > new version of thunderbird.
>
> Thanks a lot, Daniel!
>
> Would be very nice to get this into Buster rather soon.

As a point of detail, we just had a point release, so no changes are 
happening to buster for a couple of months or so. (I'm aware that 
-updates exists, obviously.)

> At the moment,
> enigmail users either have to continue using a Thunderbird version with
> known security vulnerabilities or have to uninstall enigmail (and
> install the upstream version of Enigmail, which has its own drawbacks).

I was told on IRC that the plan was for this update to be released via 
the security archive.

Daniel, could you clarify, please?

Regards,

Adam