1
To install security updates automatically I use unattended-upgrade : $ sudo unattended-upgrade -d | tail -1 No packages found that can be upgraded unattended and no pending auto-removals I also tried another tool called debsecan (homepage, currently on official repos) too list all packages with any vulnerability of CVE database. On a recently updated Ubuntu 18.04 LTS it return 967 "remotely exploitable, high urgency" vulnerabilities on 220 packages (7 times more in total): $ debsecan | grep "remotely exploitable, high urgency" | wc -l 967 $ debsecan | grep "remotely exploitable, high urgency" | col2 | uniq | wc -l 220 $ debsecan | grep -o "201[0-9]" | sort | uniq -c 10 2012 22 2013 7 2014 55 2015 330 2016 1379 2017 4596 201...