Comment 73 for bug 1895643

Revision history for this message
Francisco Pombal (pombal.francisco) wrote :

Thanks for seeing this through, but let me raise some important points.

Why is Thunderbird not covered by the same update policy as Firefox? Sure it's not a web browser, but it's one of the most important and widely used GUI email clients. Also, it is a close cousin of Firefox.

These updates took way too long to come out for LTS releases, and they are/were already obsolete once they did roll out. For example, the 78.9.x and 78.10.x releases are more than a month old at this point, and both contain fixes for "high" severity vulnerabilities:

https://www.mozilla.org/en-US/security/advisories/mfsa2021-12/
https://www.mozilla.org/en-US/security/advisories/mfsa2021-14/

I think Ubuntu should make a greater effort to keep up with Thunderbird upstream.