Assuming the server can reach the normal apt repos - you could: sudo apt update; apt list upgradable And grep for this package. Otherwise sudo apt update /us

Assuming the server can reach the normal apt repos - you could: sudo apt update; apt list upgradable And grep for this package. Otherwise sudo apt update /usr/lib/update-notifier/apt-check --human-readable Will list number of pending security updates. (part of update-notifier-common, and in task:server along with various desktop-tasks) Beyond that, you might want to look at https://vuls.io https://vuls.io or other auditing packages. Or perhaps: sudo snap install cvescan cvescan Seems it could use some exposure - I wasn't aware of it: https://github.com/canonical/sec-cvescan https://github.com/canonical/sec-cvescan