On a fresh install of Debian 7, GNOME isn't telling me when I need to install updates. It's not even checking for updates automatically (apt-get update
). Manually running apt-get update
doesn't produce a notification, even if log out & in again. But apt-get upgrade
definitely shows outstanding security updates! What's going on and how can I keep my desktop secure?
If I update the system manually, I can still reproduce this problem on demand. (Just downgrade a package e.g. using Synaptic and Package->Force Version; you can log out & in to give the notifier a fair chance at spotting it. E.g. I found bash can be downgraded and then needs a security update. Obviously don't downgrade bash if you're running any vulnerable servers, OR on an untrusted network due the DHCP bash hook vulnerability).