I got an e-mail from the store stating that my snap imap2gmail has old packages. Rebuilding the snap should resolve this. However, after rebuilding, I get messages that the new revisions still have the vulnerability.
As far as I can see, I don’t explicitly specify the versions of these packages, so they should simply update:
I find it weird that the security update does not apply to a core20. The ESM kicks in after 5 years (that was at least my understanding), and that fixes would be included for first 5 years.
The instructions are clearly wrong. Rebuilding will not solve the problem with the current setup.
I don’t use Python2, but it is in the snap. Feels weird that it is in there.
This is a brand new feature.
Up to last week universe packages did never get security updates from canonical … with the introduction of the (free) pro option, you can now get additional security updates for 20000+ packages in universe …
It is a bug that is being solved currently, that the snap auto-builds are not integrated wit this yet…