Comment 10 for bug 1996653

Revision history for this message
Liam Coogan (lcoogan) wrote :

If this is the result of a phased rollout as suggested, then the feature seems a little *ill-advised*

1. My impression was the entire point of having a build of Firefox supplied by Mozilla directly was to ensure timely security updates. Does the snapd team have any protocol for if a critical security update? Would there be a few hours/days of delay like now? And would the vulnerability then reoccur any time someone installs Ubuntu from an ISO produced before the vulnerability was fixed?

2. The app should have some way of communicating this to the user, otherwise it just creates a confusing experience. I'm not the only one who's filed a bug in the past few days over this behaviour (see #1996626).

3. The rollout ideally shouldn't occur if the user is running `snap refresh` manually. If a user is doing that, they may have a good reason why they want the latest release.