debsecan

Debian Security Analyzer, a tool to list vulnerabilities on a particular Debian installation. More information: <https://gitlab.com/fweimer/debsecan>.

Install

All systems
curl cmd.cat/debsecan.sh
Debian Debian
apt-get install debsecan
Ubuntu
apt-get install debsecan
image/svg+xml Kali Linux
apt-get install debsecan
Windows (WSL2)
sudo apt-get update sudo apt-get install debsecan
Raspbian
apt-get install debsecan
Dockerfile
dockerfile.run/debsecan

Debian Security Analyzer, a tool to list vulnerabilities on a particular Debian installation. More information: <https://gitlab.com/fweimer/debsecan>.

  • List vulnerable installed packages on the current host:
    debsecan
  • List vulnerable installed packages of a specific suite:
    debsecan --suite release_code_name
  • List only fixed vulnerabilities:
    debsecan --suite release_code_name --only-fixed
  • List only fixed vulnerabilities of unstable ("sid") and mail to root:
    debsecan --suite sid --only-fixed --format report --mailto root --update-history
  • Upgrade vulnerable installed packages:
    sudo apt upgrade $(debsecan --only-fixed --format packages)

© tl;dr; authors and contributors