The facts don't really work with 2>&1 in the case of an error, so you want 2>/dev/null instead.
* Add an apt_has_updates boolean fact * Make other facts depend on it
Making use of the apt-check command from the 'update-notifier-common' package (if available) display the number of available updates, number of security updates as well as the update package names.