Re: debsecan does not report a vulnerability?

From	Victor Sudakov <vas@sibptus.ru>
Newsgroups	linux.debian.user
Subject	Re: debsecan does not report a vulnerability?
Date	2020-07-08 04:20 +0200
Message-ID	<Aq7QJ-Fi-3@gated-at.bofh.it> (permalink)
References	<A3L0R-4o1-1@gated-at.bofh.it> <ApQdb-6Ej-1@gated-at.bofh.it> <Aq3k6-6hw-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

l0f4r0@tuta.io wrote:
> Hi,
> 
> 7 juil. 2020 à 09:23 de vas@sibptus.ru:
> 
> > After reading your replies and the Debian security advisories, I made up
> > my mind that I probably just want to now if new versions of packages are
> > available in the repos. Perhaps it's the best thing I can do about
> > vulnerabilities. 
> >
> > So I wrote the following UserParameter for the Zabbix agent, and I think
> > I've found it useful already:
> >
> > # Number of upgradable packages
> > UserParameter=packages.upgradeable,if [ -x /usr/bin/apt-get ] ; then /usr/bin/apt-get upgrade -s | grep -c '^Inst' ; elif [ -x /usr/bin/yum ] ; then /usr/bin/yum check-update | grep -c 'updates$'; else echo "1" ; fi
> >
> > It does not require any extra utilities to estimate the number of
> > upgradeable packages.
> >
> Regarding APT, don't forget first to do:
> apt update
> ...otherwise you won't get so many upgrades available ;)

This already happens automatically, from apt.systemd.daily I think.

> Why not just counting results of:
> apt list --upgradable
> or
> apt list --upgradeable
> ?

"WARNING: apt does not have a stable CLI interface. Use with caution in scripts."

So I chose to exercise caution.

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
2:5005/49@fidonet http://vas.tomsk.ru/

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

debsecan does not report a vulnerability? Victor Sudakov <vas@sibptus.ru> - 2020-05-07 11:30 +0200
  Re: debsecan does not report a vulnerability? Victor Sudakov <vas@sibptus.ru> - 2020-05-10 17:20 +0200
    Re: debsecan does not report a vulnerability? Ihor Antonov <ngor@antonovs.family> - 2020-05-10 21:10 +0200
      Re: debsecan does not report a vulnerability? Victor Sudakov <vas@sibptus.ru> - 2020-05-11 09:20 +0200
        Re: debsecan does not report a vulnerability? Ihor Antonov <ihor@antonovs.family> - 2020-05-12 05:00 +0200
          Re: debsecan does not report a vulnerability? David Wright <deblis@lionunicorn.co.uk> - 2020-05-12 05:20 +0200
            Re: debsecan does not report a vulnerability? Victor Sudakov <vas@sibptus.ru> - 2020-05-12 06:00 +0200
          Re: debsecan does not report a vulnerability? Victor Sudakov <vas@sibptus.ru> - 2020-05-12 05:50 +0200
          motivation for switching to Debian? (was: Re: debsecan does not  report a vulnerability?) Victor Sudakov <vas@sibptus.ru> - 2020-05-12 05:50 +0200
  Re: debsecan does not report a vulnerability? Victor Sudakov <vas@sibptus.ru> - 2020-07-07 09:30 +0200
    Re: debsecan does not report a vulnerability? l0f4r0@tuta.io - 2020-07-07 23:30 +0200
      Re: debsecan does not report a vulnerability? Victor Sudakov <vas@sibptus.ru> - 2020-07-08 04:20 +0200

csiph-web