Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

If I want to find out what security updates there are on a redhat/centos server and the coresponding security advisory I can run this command:

yum --security list-security

That would include data such as:

RHSA-2013:0132 security autofs-1:5.0.1-0.rc2.177.el5.x86_64
RHSA-2013:0131 security gnome-vfs2-2.16.2-10.el5.x86_64
RHSA-2013:0135 security gtk2-2.10.4-29.el5.i386
RHSA-2013:0130 security httpd-2.2.3-74.el5.x86_64
RHSA-2012:1590 security libtiff-3.8.2-18.el5_8.i386
RHSA-2013:0120 security quota-1:3.13-8.el5.x86_64
RHSA-2013:0129 security ruby-1.8.5-27.el5.x86_64
RHSA-2013:0129 security ruby-libs-1.8.5-27.el5.x86_64
RHSA-2013:0122 security tcl-8.4.13-6.el5.x86_64

This way not only do I know what packages need to be updated, if I want I can also find out what the security risk is in detail by looking up the RHSA. Basic, and very handy information to have.

The closest I could figure out on ubuntu is:

sudo apt-get upgrade -s| grep ^Inst |grep -i security

Unfortunately this only shows me that there are security packages that need to be installed.

Is there a native way to find out the related security advisories? By native, I mean without having to use a third party package.

share|improve this question
I suppose opening a web browser and visiting is not an option you prefer? – Zoredache Jan 8 '13 at 18:43
You'll probably have to address this issue to the Ubuntu folks. I'm not sure anybody here can help you. – mdpc Jan 8 '13 at 19:03

In addition to the option you gave:

apt-get -s dist-upgrade |grep "^Inst" |grep -i securi 

You could try:

unattended-upgrade --dry-run -d


/usr/lib/update-notifier/apt-check -p

(Seen on Ask Ubuntu)

share|improve this answer
None of those appear to include the relevant security advisory, such as : USN-1680-1 for moinmoin – neoCrimeLabs Jan 8 '13 at 18:58
Sorry, you get to look those up yourself. I don't think Canonical has provided a way to do exactly what yum-security does yet. – Michael Hampton Jan 8 '13 at 19:06
Thanks for the various options. That is handy. :-) – neoCrimeLabs Jan 8 '13 at 19:33

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.