diff --git a/pages/linux/debsecan.md b/pages/linux/debsecan.md new file mode 100644 index 000000000..68104f51e --- /dev/null +++ b/pages/linux/debsecan.md @@ -0,0 +1,24 @@ +# debsecan + +> Debian Security Analyzer, a tool to list vulnerabilities on a particular Debian installation. +> More information: . + +- List vulnerable installed packages on the current host: + +`debsecan` + +- List vulnerable installed packages of a specific suite: + +`debsecan --suite {{release_code_name}}` + +- List only fixed vulnerabilities: + +`debsecan --suite {{release_code_name}} --only-fixed` + +- List only fixed vulnerabilities of unstable ("sid") and mail to root: + +`debsecan --suite {{sid}} --only-fixed --format {{report}} --mailto {{root}} --update-history` + +- Upgrade vulnerable installed packages: + +`sudo apt upgrade $(debsecan --only-fixed --format {{packages}})`