Personally for security, tightly scoped, point releases I'm happy to
just get a notice to this list that it has been released. I agree that
with specific and limited security fixes that are exploited in the wild,
getting a patch out has to the the highest priority. Very close to that
is a notice to people that now need to deploy that patch though.
As Major.minor Firefox ESR is released on a known schedule, I really
think that Mozilla actually is on the side of caution in pre-announcing
those, anyone who can read the chart given once a year and use a
calendar doesn't actually need "pre-release" announcements. That said,
the reminders are nice so I don't need to put things manually into my
calendar to remind me.
I *would not* hold up any release that was scheduled in the calendar or
that was a currently exploited security patch just so there's some
arbitrary time between a mailing list post and the release.
A notice when the release is available for download is appreciated
though, and I think important for the un-planned patches.
James Pulver
CLASSE Computer Group
Cornell University
On 02/21/2016 11:27 AM, Mike Connor wrote:
To answer one question, that's the only fix listed in the release notes:
https://www.mozilla.org/en-US/firefox/38.6.1/releasenotes/
To answer the other, we typically don't provide specific or advance
notice of these unscheduled point releases, as our focus in these
situations is on shipping the fix in the shortest possible time. These
point releases are typically tightly scoped, and focused on rapidly
addressing publicly disclosed vulnerabilities. I think that's the right
focus, overall.
That said, clearly there's some expectations floating around, so I'd
like to understand more about what folks are looking for from Mozilla.
-- Mike
_______________________________________________
Enterprise mailing list
[email protected]
https://mail.mozilla.org/listinfo/enterprise
To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise
or send an email to [email protected] with a subject of
"unsubscribe"
_______________________________________________
Enterprise mailing list
[email protected]
https://mail.mozilla.org/listinfo/enterprise
To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise
or send an email to [email protected] with a subject of
"unsubscribe"
