debsecan

Debian Security Analyzer, a tool to list vulnerabilities on a particular Debian installation. More information: https://gitlab.com/fweimer/debsecan.

• List vulnerable installed packages on the current host:
  debsecan
• List vulnerable installed packages of a specific suite:
  debsecan --suite {{release_code_name}}
• List only fixed vulnerabilities:
  debsecan --suite {{release_code_name}} --only-fixed
• List only fixed vulnerabilities of unstable ("sid") and mail to root:
  debsecan --suite {{sid}} --only-fixed --format {{report}} --mailto {{root}} --update-history
• Upgrade vulnerable installed packages:
  sudo apt upgrade $(debsecan --only-fixed --format {{packages}})