Every time I have to install a security update, Muon fails to count them correctly. e.g. when there are 5 security updates (i.e. openssl, linux-image etc.) it says in the notification tray: "there are 10 updates, of which 5 are security updates". Another example: I have to update winetricks and tiled (they arent't really important), libsamba-common and rsync (which are important instead) it says "there are 8 updates, of which 2 are security updates". Let's count: there are 4 updates, of which 2 are not fundamental, and the other ones, which are important instead, so I multiply by 2 and obtain 4. 4 plus the two ones that are not fundamental and should I obtain 6. As a matter of fact I obtain 8. Reproducible: Always Steps to Reproduce: I just need to wait for a security update to find me caught up in that bug. Actual Results: The update goes well. No problems here. Expected Results: It should have counted them correctly. I'm using Kubuntu 15.04.
I'll give you another example: today I have to update. Muon-updater says: "there are 9 updates, of which 4 are security updates". Actually there are 6 updates, of which 1 is winetricks (I'm using an annoying PPA) and the others are: gir1.2-gdkpixbuf-2.0, libgdk-pixbuf2.0-0, libgdk-pixbuf2.0-0 (yes, it's redundant), libgdk-pixbuf2.0-common, wireless-regdb . wireless-regdb is the only package I judge as a "Security" update, the other ones are simply updates of Gimp's dependencies. So, let's count them: We have 5 normal updates (Winetricks and Gimp's) and wireless-regdb, which is a security update. It says we have 4 security updates. So, it counted four times wireless-regdb, And the count is: Winetricks(1) + Gimp's(4, including the redundant one) + wireless-regdb (1 * 4) = 9 Unfortunately I don't take always notice of the updates. So far. Since now I will post here what I get in next updates.
Edit: the redundant one is for i386 (I have x86_64)
New updates (weekly): It says: 80 updates, of which 38 are security updates. I counted: 60 updates, of which 36-38 (sorry but I didn't count them well) are security updates
This appears to still be present in kde 5.5.3. I am running kubuntu 15.10, with the backports installed.
Fixed as of 5.6.0, it's also in the Plasma/5.5 branch as well, in case you have a packager around.