Comment 2 for bug 1750600

Hi Norbert --

Landscape does not take into account the "pocket" (ex: ubuntu-security) where a package comes from when reporting if an upgrade is a security fix or not. See this page for more details on pockets: https://wiki.ubuntu.com/SecurityTeam/FAQ#How_are_components_and_pockets_used_in_the_builds.2C_and_how_do_they_affect_security_updates.3F

Instead, Landscape relies on the USN Database, which is authoritative for Ubuntu systems. A number of factors could be at play here, and this problem would need more isolation before it could be actioned.

Just off the top of my head:

1) Your image shows 38 "Upgrades", but you had 7 packages actually installed in your output. These could be different machines, or different points in time.

2) There is a package reporter process that runs periodically from the client and reports back to the server, you may have caught things during a window before that was run.

3) the USN database needs to be kept up to date, and errors or firewall blocks can cause this process to never complete. See here for example: https://askubuntu.com/questions/879604/, https://askubuntu.com/questions/818983

Please check into these things and narrow things down. But, just so you know, your base assumption about the pocket being important to Landscape calculation is not correct. It does not come into play at all. Just package name, version and the USN database are used.