I'm not sure what you're trying to say here, but Enigmail 2 was released a few months after the researchers disclosed the vulnerability to the project[1], so it

I'm not sure what you're trying to say here, but Enigmail 2 was released a few months after the researchers disclosed the vulnerability to the project[1], so it would've been a rather sad state of affairs if the release hadn't included a fix. That's not to say that everything's fine now for users of Thunderbird and Enigmail[2]. [1]: https://sourceforge.net/p/enigmail/bugs/721/ https://sourceforge.net/p/enigmail/bugs/721/ [2]: https://twitter.com/hanno/status/997138771194859521 https://twitter.com/hanno/status/997138771194859521