Hallo, I have a spcial question about secirity update of Firefox 4 on F-15. On http://www.heise.de/newsticker/meldung/Diskussionen-um-Versionspolitik-vo... you could read, that upstream doensn't release the security update fireforx-4.0.1. Instead users should update to Firefox 5. My question is, how should fedora handle this cas. I can't believe, that we shouldn't get any security updates for Firefox until the release of F-16.

FF5 is the security update to FF4.0.1, which incorporates an upstream versioning policy change.

Felix Miata wrote: > FF5 is the security update to FF4.0.1, which incorporates an upstream > versioning policy change. The funny thing is that Firefox is going exactly the opposite way of us with their update policies,

and that as a result, that Firefox security update is not compliant with our update policies

On Sun, Jun 26, 2011 at 1:01 PM, Christoph Wickert <christoph.wickert(a)googlemail.com&gt; wrote: > Am Sonntag, den 26.06.2011, 17:08 +0200 schrieb Kevin Kofler: >> Felix Miata wrote: >> > FF5 is the security update to FF4.0.1, which incorporates an upstream >> > versioning policy change. >> >> The funny thing is that Firefox is going exactly the opposite way of us with >> their update policies, > > They didn't change their update policy but their release/development > model. FF 5 is an update to FF 4, but 3.6 got an update to 3.6.18, too. > This means that Mozilla's update policy hasn't changed. > >> and that as a result, that Firefox security update is >> not compliant with our update policies > > At what point exactly? Basically all that has changed is the version, > IHMO FF 5 can better be described as FF 4.1. The user experience hasn't > changed and the update meets all requirements of the update policy, so I > really don't see a problem here. > Firefox 5 is not stable because it introduces new features.

The most visible example of this is users who had extensions stop working with Firefox 5.

Firefox's policy has changed. In the past they supported a stable version for more than one day after the new release was out.

They're not doing that anymore with Firefox 4, so users are forced to use the new features (and bugs) of a new release. It's a great policy if you're in a race to not lose mindshare from Chrome, it's not so great for the people who have Firefox deployed in stable environments.

On 2011-06-26 12:33, Christoph Wickert wrote: > And I have no idea what part of our update policy should be violated by > this update. Please somebody enlighten me. This part: * Avoid changing the user experience if at all possible. Specifically, the update breaks a number of user-installed extensions because the extensions expect a certain version string. This is a functional regression regardless of whether or not the extension API changed. Please do not misconstrue this message as a value judgment.

To All I do not understand what are talking about. Firefox and Thunderbird now does not require any kind of linux distribution attention. Download bz2 archive from their site, unpack it to any directory (for example - /usr/local/share) and start it.