News for hackers. Stuff that matters.

A comment on KDE and GNOME seeks $100k to turn Flathub into a Store for the Linux desktop. Parent comment

Re:KDE and GNOME seeks $100k to turn Flathub into a Store fo... by bandrami on Friday February 24, 2023 @01:17AM (#34921469)
Lagging isn't always a bad thing. Users of Debian Stable missed Heartbleed entirely.

But this gets to the mindset that bugs me about Flatpak, the magical thinking that regressions don't happen. It's why Alice can't downgrade a system flatpak because it might introduce a vulnerability she uses to attack Bob, but it's absolutely fine if she upgrades to introduce that vulnerability.

[ Parent | on HN ]
Re:KDE and GNOME seeks $100k to turn Flathub into a Store fo... by gapan on Friday February 24, 2023 @02:28AM (#34921928)
While I generally agree with you with respect to the mindset, it is actually possible to downgrade a flatpak [1]. It is rather involved, but possible. I have done it to downgrade cheese (the webcam app) since newer versions don't have the filters that older ones did, at least not for me.

[1]: https://itsfoss.com/downgrade-flatpak-packages/

[ Parent | on HN ]
Re:KDE and GNOME seeks $100k to turn Flathub into a Store fo... by UltimateEdge on Friday February 24, 2023 @05:03AM (#34922919)
> it is actually possible to downgrade a flatpak

Only when the version you want to downgrade to happens to be within the last 10 versions! Why 10? Beats me!

Case in point: the flatpak package for the Element messaging client seems to be the preferred installation method for non-debian distros. But for many users, encrypted message search is broken! [1] [2] Some users claim that downgrading can fix the issue, but the flatpak has been updated too many times now for any user to downgrade to an old enough version - tough luck!

[1] https://github.com/vector-im/element-web/issues?q=is%3Aissue... [2] https://github.com/flathub/im.riot.Riot/issues?q=is%3Aissue+...

[ Parent | on HN ]
Re:KDE and GNOME seeks $100k to turn Flathub into a Store fo... by bandrami on Friday February 24, 2023 @06:24AM (#34923393)
It is! I have to do it with Mixxx because of some weird GL bugs they're having in 2.3.3. But it's a privileged operation compared to upgrading, which is crazy.
[ Parent | on HN ]