debsecan
Debian Security Analyzer, a tool to list vulnerabilities on a particular Debian installation. tldr-pages
On Linux
Linux
List vulnerable installed packages on the current host
debsecanIdentifyList vulnerable installed packages of a specific suite
debsecan --suite release_code_nameIdentifyList only fixed vulnerabilities
debsecan --suite release_code_name --only-fixedIdentifyList only fixed vulnerabilities of unstable ("sid") and mail to root
debsecan --suite sid --only-fixed --format report --mailto root --update-historyIdentifyUpgrade vulnerable installed packages
sudo apt upgrade $(debsecan --only-fixed --format packages)Identify