This is the expected behavior, it will pick the highest version (well highest priority version) from any allowed repository. You have not disallowed installing the Ubuntu one, and you also did not allow it to install the Mozilla one.
You have two options 1) Pin the Ubuntu version down instead: Instead of Package: * Pin: origin packages.mozilla.org Pin-Priority: 1000 please use Package: firefox Pin: release o=Ubuntu* Pin-Priority: -1 or similar. 2) Add the Mozilla repository to the unattended-upgrades allow list. Unattended-Upgrade::Allowed-Origins 3) Add firefox to Unattended-Upgrade::Package-Blacklist You may also be able to pin the installed version to 1000 Package: firefox Pin: release now Pin-Priority: 1000 This should cause it to not consider the Ubuntu versions as allowed upgrades. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2079810 Title: unattended-upgrades doesn't respect repo pin-priority To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unattended-upgrades/+bug/2079810/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
