This is arguably an update-notifier bug instead of a pam bug (i.e. update-notifier should not put anything in update-motd that takes long to run).
This is arguably an update-notifier bug instead of a pam bug (i.e. update-notifier should not put anything in update-motd that takes long to run).