commands.sh

debsecan

linux

Debian Security Analyzer, a tool to list vulnerabilities on a particular Debian installation.

More info →

Examples (5)

List vulnerable installed packages on the current host

List vulnerable installed packages of a specific suite

debsecan --suite release_code_name

List only fixed vulnerabilities

debsecan --suite release_code_name --only-fixed

List only fixed vulnerabilities of unstable ("sid") and mail to root

debsecan --suite sid --only-fixed --format report --mailto root --update-history

Upgrade vulnerable installed packages

sudo apt upgrade $(debsecan --only-fixed --format packages)
made by @shridhargupta | data from tldr-pages