Using the Command 'ubuntu-security-status' (with examples)

The ubuntu-security-status command provides valuable insights into the security status of packages installed on your Ubuntu system. It gives an overview of supported and unsupported packages, highlights which packages are not available for download, and identifies third-party packages that might pose security concerns. This command is an essential tool for Ubuntu users and administrators who wish to maintain a secure system by staying informed about the security posture of their installed software.

Use case 1: Display the number of unsupported packages

Code:

ubuntu-security-status

Motivation:

Understanding the number of unsupported packages on your system is crucial for maintaining security. Unsupported packages are those for which updates and security patches are no longer provided, leaving your system vulnerable to potential security threats. By using this command, you get a quick overview of how many packages fall into this category, allowing you to take necessary actions such as upgrading to newer versions or seeking alternative packages that are still supported.

Explanation:

• ubuntu-security-status: This command, when run without any additional arguments, gives a general overview of the security status of all installed packages. It includes information on the number of unsupported packages, supported packages, and packages with security updates.

Example output:

213 packages installed, of which:
176 receive package updates with LTS until 4/2025
37 packages are unsupported

Use case 2: List packages that are no longer available for download

Code:

ubuntu-security-status --unavailable

Motivation:

Listing packages that are no longer available for download is an important step in security auditing. Packages that cannot be downloaded are typically obsolete, meaning they are no longer maintained or updated. Continuously running such packages might expose your system to unpatched vulnerabilities. Identifying these packages allows you to consider replacing them with actively maintained alternatives, thereby minimizing security risks.

Explanation:

• --unavailable: This argument tells the ubuntu-security-status command to specifically list packages installed on your system that are no longer available for download from the Ubuntu repositories. By highlighting these packages, the command helps you recognize software that may need attention due to its lack of availability and potential obsolescence.

Example output:

The following packages are no longer available for download:
libfoo1 1.2.3-4ubuntu5
bar-utils 2.0-2ubuntu1

Use case 3: List third-party packages

Code:

ubuntu-security-status --thirdparty

Motivation:

Discovering third-party packages on your system is vital for comprehensive security management. Third-party packages are those installed from external sources outside the official Ubuntu repositories. They can be vectors for security vulnerabilities if not monitored or vetted properly, as they might not adhere to the same rigorous security standards as officially supported packages. Knowing which third-party packages are installed can help you evaluate them for security concerns and decide whether to keep them or seek alternatives.

Explanation:

• --thirdparty: This argument directs the command to list all non-Ubuntu packages currently installed on the system. These packages are from third-party repositories or manually installed, offering users insight into potential security risks they might not be aware of within their system.

Example output:

The following 3rd party packages are installed:
chrome-stable 85.0.4183.83
vscode 1.58.0

Conclusion:

The ubuntu-security-status command is a versatile tool for system administrators and Ubuntu users aiming to uphold system security. Whether you are checking for unsupported packages, identifying packages that are no longer available, or monitoring third-party installs, this command provides essential insights that can guide your system maintenance tasks. By regularly using the command to audit the security status of your packages, you can effectively mitigate risks associated with outdated or unverified software.