Index: src/wp-admin/includes/update.php
===================================================================
--- src/wp-admin/includes/update.php	(revision 29732)
+++ src/wp-admin/includes/update.php	(working copy)
@@ -196,20 +196,45 @@
 
 	global $pagenow;
 
+	$plugin_needs_update = maybe_unserialize( get_site_transient('update_plugins'));
+	foreach( $plugin_needs_update->response as $plugins => $plugin_slugs ) {
+		$plugin_slug =  $plugin_slugs->slug;
+		$url = $http_url = 'http://api.wordpress.org/plugins/info/1.0/';
+               	if ( $ssl = wp_http_supports( array( 'ssl' ) ) )
+                       	$url = set_url_scheme( $url, 'https' );
+		// Check the Plugin repo for plugin information
+                $request = wp_remote_post( $url . $plugin_slug );
+		$res = maybe_unserialize( wp_remote_retrieve_body( $request ) );
+		// Check for the "security-update" tag on the .org repo
+		if( isset( $res->tags['security-update'] ) ) {
+			$plugin_security_update = $res->tags['security-update'];
+		}
+	}
+
 	if ( 'update-core.php' == $pagenow )
 		return;
 
 	$cur = get_preferred_from_update_core();
 
-	if ( ! isset( $cur->response ) || $cur->response != 'upgrade' )
-		return false;
-
-	if ( current_user_can('update_core') ) {
-		$msg = sprintf( __('<a href="http://codex.wordpress.org/Version_%1$s">WordPress %1$s</a> is available! <a href="%2$s">Please update now</a>.'), $cur->current, network_admin_url( 'update-core.php' ) );
+	if ( isset( $cur->response ) || $cur->response == 'upgrade' ) {
+		if ( current_user_can('update_core') ) {
+			$msg = sprintf( __('<a href="http://codex.wordpress.org/Version_%1$s">WordPress %1$s</a> is available! <a href="%2$s">Please update now</a>.'), $cur->current, network_admin_url( 'update-core.php' ) );
+		} else {
+			$msg = sprintf( __('<a href="http://codex.wordpress.org/Version_%1$s">WordPress %1$s</a> is available! Please notify the site administrator.'), $cur->current );
+			echo "<div class='update-nag'>$msg</div>";
+		}
 	} else {
-		$msg = sprintf( __('<a href="http://codex.wordpress.org/Version_%1$s">WordPress %1$s</a> is available! Please notify the site administrator.'), $cur->current );
+		return;
 	}
-	echo "<div class='update-nag'>$msg</div>";
+
+	if ( isset( $plugin_security_update ) && $plugin_security_update == 'security-update' ) {
+		if ( current_user_can( 'update_plugins' ) ) {
+			$msg = sprintf( __('A plugin you have installed has issued a security release. <a href="%1$s">Please update now.</a>'), network_admin_url( 'update-core.php' ) );
+			echo "<div class='update-nag'>$msg</div>";
+		} else {
+			return;
+		}
+	}
 }
 add_action( 'admin_notices', 'update_nag', 3 );
 add_action( 'network_admin_notices', 'update_nag', 3 );