{"action":"created","issue":{"url":"https://api.github.com/repos/linuxmint/mintupdate/issues/245","repository_url":"https://api.github.com/repos/linuxmint/mintupdate","labels_url":"https://api.github.com/repos/linuxmint/mintupdate/issues/245/labels{/name}","comments_url":"https://api.github.com/repos/linuxmint/mintupdate/issues/245/comments","events_url":"https://api.github.com/repos/linuxmint/mintupdate/issues/245/events","html_url":"https://github.com/linuxmint/mintupdate/issues/245","id":234497639,"number":245,"title":"Update manager Mint 18.2 levels (especially for Firefox)","user":{"login":"Cos-mo","id":17322130,"avatar_url":"https://avatars1.githubusercontent.com/u/17322130?v=3","gravatar_id":"","url":"https://api.github.com/users/Cos-mo","html_url":"https://github.com/Cos-mo","followers_url":"https://api.github.com/users/Cos-mo/followers","following_url":"https://api.github.com/users/Cos-mo/following{/other_user}","gists_url":"https://api.github.com/users/Cos-mo/gists{/gist_id}","starred_url":"https://api.github.com/users/Cos-mo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Cos-mo/subscriptions","organizations_url":"https://api.github.com/users/Cos-mo/orgs","repos_url":"https://api.github.com/users/Cos-mo/repos","events_url":"https://api.github.com/users/Cos-mo/events{/privacy}","received_events_url":"https://api.github.com/users/Cos-mo/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2017-06-08T11:33:36Z","updated_at":"2017-06-19T16:03:54Z","closed_at":null,"body":"Mint 18.2 beta Cinnamon 64 bit.\r\n\r\nNote: The following problem is only taken from the documentation (included help file), as until now except 2 kernel updates nothing than level 2 updates have been released; so no practical tests had been possible.\r\n\r\nI read in the documentation, that Firefox will be listed as level 3 update. I consider this as a serious security mistake.\r\n\r\nA browser is the direct connection for the user for most accesses to the Internet. A security hole in the browser might seriously affect the system, at least the user account. So updating the browser - here: Firefox - as soon as possible is one of the most important things to do. No security advisor will put this in question.\r\n\r\nBut leveling FF to level 3 means, that those, you select the first update manager policy choice will not even see it. A very dangerous situation.\r\n\r\nFurther more I wonder, what \"qualifies\" FF for level 3 at all. Which other applications or which part of the system are supposed to fail, if a FF update should bring a regression? Many years of practical experience tell, that this is near to impossible to happen. In this hypothetical case it will be only FF which will fail (just as any level 1 or 2 application would possibly fail in case of a serious regression), but that is all.\r\n\r\nBesides that one of my main activities in the support forum is to help users, who have a problem with FF. A high number of tens (perhaps more than hundred) successful support tasks tell me, that in 95 + % of all cases a problem with FF is a problem with the FF profile. It might get corrupted, there might be a wrong setting or a problematic add-on. Resetting the FF-profile is nearly always the working solution in those cases. Conclusion: There is no reason (IMHO), which qualifies FF to anything different as for level 1 or at least 2. But there are important aspects, which disqualifies FF for level 3.\r\n\r\nAdditionally you should know, that there do exist users, who believe to make a very secure choice by applying only level 1 or at most level 2. This is not my choice and I recommend users a different approach. But without possible doubt the update manager allows this. By doing a very heavily support job in the forum I know, that those users do exist and there cannot be the least doubt, that with the current level for FF they will quickly and about every 6 weeks again fall into this security trap."},"comment":{"url":"https://api.github.com/repos/linuxmint/mintupdate/issues/comments/309486424","html_url":"https://github.com/linuxmint/mintupdate/issues/245#issuecomment-309486424","issue_url":"https://api.github.com/repos/linuxmint/mintupdate/issues/245","id":309486424,"user":{"login":"NZamp","id":25671112,"avatar_url":"https://avatars3.githubusercontent.com/u/25671112?v=3","gravatar_id":"","url":"https://api.github.com/users/NZamp","html_url":"https://github.com/NZamp","followers_url":"https://api.github.com/users/NZamp/followers","following_url":"https://api.github.com/users/NZamp/following{/other_user}","gists_url":"https://api.github.com/users/NZamp/gists{/gist_id}","starred_url":"https://api.github.com/users/NZamp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/NZamp/subscriptions","organizations_url":"https://api.github.com/users/NZamp/orgs","repos_url":"https://api.github.com/users/NZamp/repos","events_url":"https://api.github.com/users/NZamp/events{/privacy}","received_events_url":"https://api.github.com/users/NZamp/received_events","type":"User","site_admin":false},"created_at":"2017-06-19T16:03:54Z","updated_at":"2017-06-19T16:03:54Z","body":"This must be something that escaped from the dev team. It's too serious for the security of the system to be left like that on purpose.\r\n\r\n@clefebvre  **Bug**"}}
{"actor":{"display_login":"NZamp"}}