CODEWITHSUNDEEP
debianapt
isevcik
isevcik

Reputation: 593

Debian apt-get upgrade How to install only security updates?

How to install only security updates in Debian? When I run apt-get upgrade, apt will offer all updates.

Upvotes: 12

Views: 20956

Answers (3)

elpresidento
elpresidento

Reputation: 675

Debsecan (Debian Security Analyzer) is better for manual upgrade and it can produce clear output. There are CVEs for detail information too. At first install debsecan:

sudo apt-get install debsecan

Get your distribution codename of Debian. For example:

cat /etc/os-release

And now install all security updates (instead of buster choose your suite detected from previous command. Values can be 'woody', 'sarge', 'etch', 'lenny', 'squeeze', 'wheezy', 'jessie', 'stretch', 'buster', 'bullseye' ... etc):

sudo apt-get install $(debsecan --suite buster --format packages --only-fixed)

All CVEs can be listed before the upgrade (use --format detail for detailed output):

debsecan

for example part of summary output:

debsecan summary output

Upvotes: 19

donpolilla
donpolilla

Reputation: 51

The package unattended-upgrades installs only security upgrades by default. You can configure it to install them automatically, or just call it with:

sudo unattended-upgrade

More information on how to get it running properly: https://wiki.debian.org/UnattendedUpgrades

Upvotes: 5

user345352353
user345352353

Reputation: 69

upgrade_repo() {
sudo apt-get upgrade -o Dir::Etc::sourcelist="sources.list.d/$1" \
-o Dir::Etc::sourceparts="-" -o APT::Get::List-Cleanup="0"    
}

Upvotes: -1

Related Questions