[Bug 1224999] Re: apt-check fails to see security updates in some circumstances

ski 1224999 at bugs.launchpad.net
Fri Sep 13 18:47:54 UTC 2013 

No, they do not:

ski at nkrumah:~$ sudo apt-get update ; echo ; cat /etc/issue ; dpkg -l | grep linux-image ; cat /proc/version ; /usr/lib/update-notifier/apt-check -p ; echo
Hit http://archive.ubuntu.com precise Release.gpg
Hit http://archive.ubuntu.com precise-updates Release.gpg
Hit http://archive.ubuntu.com precise-security Release.gpg
Hit http://linux.dell.com  Release.gpg
Hit http://archive.ubuntu.com precise Release
Hit http://archive.ubuntu.com precise-updates Release
Hit http://archive.ubuntu.com precise-security Release                               
Hit http://archive.ubuntu.com precise/main Sources                        
Hit http://archive.ubuntu.com precise/restricted Sources                 
Hit http://archive.ubuntu.com precise/universe Sources
Hit http://archive.ubuntu.com precise/multiverse Sources
Hit http://archive.ubuntu.com precise/main amd64 Packages
Hit http://archive.ubuntu.com precise/restricted amd64 Packages
Hit http://linux.dell.com  Release             
Get:1 http://archive.ubuntu.com precise/universe amd64 Packages [4,786 kB]
Get:2 http://archive.ubuntu.com precise/multiverse amd64 Packages [119 kB]
Hit http://linux.dell.com  Packages                                    
Get:3 http://archive.ubuntu.com precise/main i386 Packages [1,274 kB]  
Get:4 http://archive.ubuntu.com precise/restricted i386 Packages [8,431 B]           
Get:5 http://archive.ubuntu.com precise/universe i386 Packages [4,796 kB]            
Ign http://linux.dell.com  Translation-en_US                                         
Get:6 http://archive.ubuntu.com precise/multiverse i386 Packages [121 kB]          
Get:7 http://archive.ubuntu.com precise/main TranslationIndex [3,706 B]    
Get:8 http://archive.ubuntu.com precise/multiverse TranslationIndex [2,676 B]        
Get:9 http://archive.ubuntu.com precise/restricted TranslationIndex [2,596 B]        
Get:10 http://archive.ubuntu.com precise/universe TranslationIndex [2,922 B]         
Get:11 http://archive.ubuntu.com precise-updates/main Sources [416 kB]               
Ign http://linux.dell.com  Translation-en                                      
Get:12 http://archive.ubuntu.com precise-updates/restricted Sources [7,031 B]  
Get:13 http://archive.ubuntu.com precise-updates/universe Sources [95.7 kB]
Get:14 http://archive.ubuntu.com precise-updates/multiverse Sources [8,343 B]
Get:15 http://archive.ubuntu.com precise-updates/main amd64 Packages [687 kB]
Get:16 http://archive.ubuntu.com precise-updates/restricted amd64 Packages [11.5 kB]
Get:17 http://archive.ubuntu.com precise-updates/universe amd64 Packages [215 kB]
Get:18 http://archive.ubuntu.com precise-updates/multiverse amd64 Packages [13.9 kB]
Get:19 http://archive.ubuntu.com precise-updates/main i386 Packages [707 kB]
Get:20 http://archive.ubuntu.com precise-updates/restricted i386 Packages [11.4 kB]
Get:21 http://archive.ubuntu.com precise-updates/universe i386 Packages [219 kB]
Get:22 http://archive.ubuntu.com precise-updates/multiverse i386 Packages [14.0 kB]
Get:23 http://archive.ubuntu.com precise-updates/main TranslationIndex [3,564 B]
Get:24 http://archive.ubuntu.com precise-updates/multiverse TranslationIndex [2,605 B]
Get:25 http://archive.ubuntu.com precise-updates/restricted TranslationIndex [2,461 B]
Get:26 http://archive.ubuntu.com precise-updates/universe TranslationIndex [2,850 B]
Get:27 http://archive.ubuntu.com precise-security/main Sources [85.2 kB]
Get:28 http://archive.ubuntu.com precise-security/restricted Sources [2,494 B]
Get:29 http://archive.ubuntu.com precise-security/universe Sources [28.0 kB]
Get:30 http://archive.ubuntu.com precise-security/multiverse Sources [1,804 B]
Get:31 http://archive.ubuntu.com precise-security/main amd64 Packages [312 kB]
Get:32 http://archive.ubuntu.com precise-security/restricted amd64 Packages [4,627 B]
Get:33 http://archive.ubuntu.com precise-security/universe amd64 Packages [81.3 kB]
Get:34 http://archive.ubuntu.com precise-security/multiverse amd64 Packages [2,449 B]
Get:35 http://archive.ubuntu.com precise-security/main i386 Packages [331 kB]
Get:36 http://archive.ubuntu.com precise-security/restricted i386 Packages [4,620 B]
Get:37 http://archive.ubuntu.com precise-security/universe i386 Packages [84.5 kB]
Get:38 http://archive.ubuntu.com precise-security/multiverse i386 Packages [2,640 B]
Get:39 http://archive.ubuntu.com precise-security/main TranslationIndex [74 B]
Get:40 http://archive.ubuntu.com precise-security/multiverse TranslationIndex [72 B]
Get:41 http://archive.ubuntu.com precise-security/restricted TranslationIndex [72 B]
Get:42 http://archive.ubuntu.com precise-security/universe TranslationIndex [73 B]
Get:43 http://archive.ubuntu.com precise/main Translation-en [726 kB]
Get:44 http://archive.ubuntu.com precise/multiverse Translation-en [93.4 kB]
Get:45 http://archive.ubuntu.com precise/restricted Translation-en [2,395 B]
Get:46 http://archive.ubuntu.com precise/universe Translation-en [3,341 kB]
Get:47 http://archive.ubuntu.com precise-updates/main Translation-en [310 kB]
Get:48 http://archive.ubuntu.com precise-updates/multiverse Translation-en [8,064 B]
Get:49 http://archive.ubuntu.com precise-updates/restricted Translation-en [2,637 B]
Get:50 http://archive.ubuntu.com precise-updates/universe Translation-en [126 kB]
Get:51 http://archive.ubuntu.com precise-security/main Translation-en [150 kB]
Get:52 http://archive.ubuntu.com precise-security/multiverse Translation-en [1,299 B]
Get:53 http://archive.ubuntu.com precise-security/restricted Translation-en [1,253 B]
Get:54 http://archive.ubuntu.com precise-security/universe Translation-en [51.9 kB]
Fetched 11.0 MB in 6s (1,596 kB/s)                                                   
Reading package lists... Done

Ubuntu 12.04.3 LTS \n \l

ii  linux-image-3.2.0-23-generic         3.2.0-23.36                       Linux kernel image for version 3.2.0 on 64 bit x86 SMP
Linux version 3.2.0-23-generic (buildd at crested) (gcc version 4.6.3 (Ubuntu/Linaro 4.6.3-1ubuntu4) ) #36-Ubuntu SMP Tue Apr 10 20:39:51 UTC 2012
libx11-data
tzdata
libx11-6

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to update-notifier in Ubuntu.
https://bugs.launchpad.net/bugs/1224999

Title:
  apt-check fails to see security updates in some circumstances

Status in “update-notifier” package in Ubuntu:
  Incomplete

Bug description:
  Running 12.04LTS with an old kernel package, apt-check fails to tell
  me that I am running a vulnerable kernel:

  ski at nkrumah:~$ dpkg -l | grep linux-image ; cat /proc/version ; /usr/lib/update-notifier/apt-check --human-readable ; echo
  ii  linux-image-3.2.0-23-generic         3.2.0-23.36                       Linux kernel image for version 3.2.0 on 64 bit x86 SMP
  Linux version 3.2.0-23-generic (buildd at crested) (gcc version 4.6.3 (Ubuntu/Linaro 4.6.3-1ubuntu4) ) #36-Ubuntu SMP Tue Apr 10 20:39:51 UTC 2012
  3 packages can be updated.
  0 updates are security updates.

  ski at nkrumah:~$ dpkg -l | grep linux-image ; cat /proc/version ; /usr/libnotifier/apt-check -p ; echo
  ii  linux-image-3.2.0-23-generic         3.2.0-23.36                       Linux kernel image for version 3.2.0 on 64 bit x86 SMP
  Linux version 3.2.0-23-generic (buildd at crested) (gcc version 4.6.3 (Ubuntu/Linaro 4.6.3-1ubuntu4) ) #36-Ubuntu SMP Tue Apr 10 20:39:51 UTC 2012
  libx11-data
  tzdata
  libx11-6

  here is one such security bug affecting 3.2.0-23, i'd bet there are others:
    http://www.ubuntu.com/usn/usn-1929-1/

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/update-notifier/+bug/1224999/+subscriptions

More information about the foundations-bugs mailing list