I have a question regarding security updates in LTS editions, in concrete Ubuntu 16.04 LTS.

What is the policy for offering security updates? Recently there was released version 52.9.0 fixing some security issues, but not on Ubuntu 16.04.

Thunderbird is in the main repository, so it should get security updates for 5 years. Is this different for Thunderbird, or does it just take a little bit longer?

  • If you do not want to wait for ubuntu to release a fix, follow the I instructions on the page you gave to download and install manually – Panther Jul 9 '18 at 14:49

Your link goes to the specific notices if you follow the "security fixes" link and will show you the Common Vulnerabilities and Exposures (CVE) number. Ubuntu has a CVE website where new are posted and there is also the CVE tracker where you can search for packages (here is Thunderbird). And here you will find the same CVE numbers with a notice per Ubuntu release and its status.

Example: one of the CVE listed is CVE-2018-12359 and it has a fix for firefox, but needs triage for Thunderbird. Basically there is no fix for Ubuntu (yet but it will be there at some point in time).

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.