The default configuration of unattended-upgrade in Jessie does not let packages from debian-security be upgraded unattended.


# unattended-upgrade --debug
Initial blacklisted packages:
Initial whitelisted packages:
Starting unattended upgrades script
Allowed origins are: ['o=Debian,a=jessie-security']
Checking: libssl1.0.0 ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>])
Checking: openssl ([<Origin component:'main' archive:'stable' origin:'Debian' label:'Debian-Security' site:'security.debian.org' isTrusted:True>])
pkgs that look like they should be upgraded:
Fetched 0 B in 0s (0 B/s)
fetch.run() result: 0
blacklist: []
whitelist: []
InstCount=0 DelCount=0 BrokenCount=0
No packages found that can be upgraded unattended
#


/etc/apt/apt.conf.d/50unattended-upgrades:

Unattended-Upgrade::Allowed-Origins {
        "${distro_id}:${distro_codename}-security";
};


Using the following instead solves the problem:

Unattended-Upgrade::Origins-Pattern {
        "origin=${distro_id},codename=${distro_codename},label=${distro_id}-Security";
};

Thanks for your bugreport.

This is a brown-paperbag bug in 0.83.3.1. I uploaded a fix to
stable-proposed and I'm talking to the security team to get  updated
version into -security too.

Sorry,
 Michael

We believe that the bug you reported is fixed in the latest version of
unattended-upgrades, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 783690@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Michael Vogt <mvo@debian.org> (supplier of updated unattended-upgrades package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 01 May 2015 08:47:07 +0200
Source: unattended-upgrades
Binary: unattended-upgrades
Architecture: source all
Version: 0.83.8
Distribution: unstable
Urgency: low
Maintainer: Michael Vogt <mvo@debian.org>
Changed-By: Michael Vogt <mvo@debian.org>
Description:
 unattended-upgrades - automatic installation of security upgrades
Closes: 783690
Changes:
 unattended-upgrades (0.83.8) unstable; urgency=low
 .
   * fix default configuration to match the jessie security
     server configuration (closes: #783690)
Checksums-Sha1:
 e701de61533f48a2fa150f88a5fa590b5804acb3 1748 unattended-upgrades_0.83.8.dsc
 ab81d86c621a3e8fc8e2aa7d4f4df83a4d62e105 75340 unattended-upgrades_0.83.8.tar.xz
 3ad635a83e3de86400ddc7bdc799b0cdb7796ee2 53230 unattended-upgrades_0.83.8_all.deb
Checksums-Sha256:
 a50128a314f87bc4569dad0cbe0157b059c19121a85fcf30ac6b48c0829608ec 1748 unattended-upgrades_0.83.8.dsc
 2f3db50d2c808edd3ebb293c227455ff564463106fba22b2a832f249679859ac 75340 unattended-upgrades_0.83.8.tar.xz
 12a4cd9e6857164422d40538e2427a7f61c94157ab1cb29976b086a000e738c5 53230 unattended-upgrades_0.83.8_all.deb
Files:
 b3faf66f5981bbb1e8b1d455a73a5846 1748 admin optional unattended-upgrades_0.83.8.dsc
 0254eaec662f7235f811dbf3b2fafa4b 75340 admin optional unattended-upgrades_0.83.8.tar.xz
 748c62705475cb2ddc92bda2972529c9 53230 admin optional unattended-upgrades_0.83.8_all.deb
iQIcBAEBCAAGBQJVQyOgAAoJEJjKuzq9TKWe0sUP/R0Z+elFmNGt+tyG3vWDiViF
e82cEN3vqEQ/xt1wR1fg1RkGxisVjSfUY2JUcBN7PanDOarRbAsn+In1dlbxz9cw
A5dc+HHRmk9ru25UyoxEk6p6mnOX22jBGlWE/P7NRw7RkmgWtKShXOxASTkpZvLJ
5+02hvsyopyijA+XTJI7ddXiWFttsxISNKB0L8buU1wGQrQM5FhiCV6i5QC6V8Kl
ycFwv3as41EmwU2HL32trwO4wK6qt6zUXQ/EQMSg8vSK3m/J0aM8gQo4aIJYRm8H
O9D3g3cE/7dgHs5hOzesA708hBylIhI9QfYdqslJH8YdDg06oYIvtG4+TpvShuEr
haEmD7feZfYo8tUNcz7DHC7EZBF3oQnFAcYj3TJ9ETr8dt6jhM2KVyTYw9HoFUjQ
curzsWwtGhBbAQj3G7ABGmpxJmu/y2eA+Y9auIkE1WJXIXBlvGir2mVUZdUJyBKT
arPD6fkZw+A0RY6vHtvTcFRjEcliB/iNRVYgp0nAYCNjnmSQ/OP6fRRH2HqD+VED
K+92k3e9DRq4QBpc7v0IJXkzG80ZqX7He1WrdmfOF6bzOdCOxNaJ0LNq85TKsbPF
WuICnH515Et06JOvD2h7VnxZZwfrQxTb8xpRZkmmziNmC/MDPVJIu2CFgMGGRBZp
FFYHAEfKjGOeHCUjHMb9
=s0tW
-----END PGP SIGNATURE-----