DE

↑ ↓ select, Enter open, Esc close

Show only pending security updates

harmlessDebian and APTdebian, ubuntu
user@server
apt list --upgradable 2>/dev/null | grep -- -security

Filters the list of upgradable packages to entries from the suite bookworm-security (Debian) or noble-security (Ubuntu). This shows at a glance which updates are security relevant and should be installed promptly. Empty output means no security updates are pending.

Note: The list is only as current as the last apt update. Run it as root first.

Also searched as

  • list security updates debian
  • are there security updates
  • show only security updates apt
  • which packages have vulnerabilities

Related one-liners

All in Debian and APT

Hold a package at its current version (apt-mark hold)

#apt-mark hold mariadb-server
cautionDebian and APT

Release a held package for updates again

#apt-mark unhold mariadb-server
cautionDebian and APT

Show available package updates

#apt update && apt list --upgradable
harmlessDebian and APT

Show the changelog of a package

$apt changelog openssl
harmlessDebian and APT

Test automatic updates (unattended-upgrades) with a dry run

#unattended-upgrade --dry-run -d
harmlessDebian and APT

Check whether a reboot is required after updates

$if [ -f /var/run/reboot-required ]; then cat /var/run/reboot-required.pkgs; else echo "Kein Neustart vermerkt"; fi
harmlessDebian and APT

Read first, then run.

The commands on myline.de act directly on servers, files and databases. A wrong path or placeholder can delete data irreversibly or make a server unreachable.

  • All commands are provided without warranty and are not tested on every system.
  • Understand what a command does before running it, and check every placeholder.
  • Make a backup first and, if possible, try it on a test system.
  • You run commands at your own risk. Liability for damages is excluded to the extent permitted by law.