debsecan:tldr:4ce4f

debsecan: Upgrade vulnerable installed packages.

$ sudo apt upgrade $(debsecan --only-fixed --format ${packages})

try on your machine

This command performs a system upgrade using the apt package manager. It utilizes the sudo command to execute the upgrade with administrative privileges.

The main part of the command $(debsecan --only-fixed --format ${packages}) involves the debsecan tool, which checks for security updates specific to installed Debian packages. It is executed within $() to capture its output and use it as an input for the apt upgrade command.

The --only-fixed flag ensures that only packages with available fixes for known vulnerabilities are considered. The --format ${packages} option specifies the desired output format, which is the package names.

Therefore, the debsecan command is responsible for listing the package names that need security fixes. This list is then passed as an argument to apt upgrade, instructing it to update only those packages with available security fixes rather than upgrading all packages on the system.

This explanation was created by an AI. In most cases those are correct. But please always be careful and never run a command you are not sure if it is safe.

back to the apt tool