On Fri 2015-06-26 13:40:51 -0400, sajolida wrote:
> The Claws Mail bug is getting a solution in the case of queued emails:
>
> http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=2965
I'm glad to see this being addressed upstream!
> What would be the next steps for us to take advantage of it? I see that
> Claws Mail has a backport [2]. Shall we wait until the patch is
> officially released, then see if it's still worth time-wise to ask for
> an update of the backports?
>
> [1]: https://tails.boum.org/security/claws_mail_leaks_plaintext_to_imap/
> [2]: https://packages.debian.org/source/wheezy-backports/claws-mail
The traditional theory on debian-backports is that it's not a place to
address critical issues or security concerns -- fixes like this should
go into stable (via security.debian.org) or testing (via unstable)
first, before pushing them into backports.
--dkg
