Ubuntu
update-notifier package

  1. Bug #356152
  2. Comment #67

Comment 67 for bug 356152

Revision history for this message
ingo (ingo-steiner) wrote :

 *** security concern ***

I did now check on an up-to-date Lucid installation, which had no updates (not booted) since 2 weeks. Definitely there are several security updates pending (I did install them on my working PC with 'apt-get update && apt-get upgrade). These are the recent security updates for CUPS.

Here the output as requested by Michael Vogt in posting #1 of this thread:

ingo@lucid:~$ ps ax|grep update-notifier
 1462 ? S 0:00 update-notifier
 1471 pts/0 S+ 0:00 grep --color=auto update-notifier
ingo@lucid:~$ killall update-notifier ; update-notifier --debug-updates
** (update-notifier:1474): DEBUG: Skipping reboot required
(update-notifier:1474): update-DEBUG: update_apt_is_running: 1

(update-notifier:1474): update-DEBUG: update_apt_is_running: 0

(update-notifier:1474): update-DEBUG: update_apt_is_running: 1

(update-notifier:1474): update-DEBUG: update_apt_is_running: 0

I did now wait for several hours and did not get any notification, nor any pop-up on the GNOME-desktop. The only thing I did notice is a very short flickering in the notification area of the gnome-panel shortly (some minutes after) boot-up.

This definitely is a security issue, because it prevents immediate installation of security-updates!

If you need more information or prefer to report a new/separate bug, please let me know.