This Linux package vulnerability scanner (LPVS) uses public security news feeds provided by Linux distributions vendors to detect out-of-date packages that could pose a threat to your server. The scanner currently runs on
  • Ubuntu
  • CentOS
Additional distributions might be added...


Please know that the scanner works by comparing complex package version numbers and therefore is limited to do overly exact matches. It works best on an almost up-to-date installation. For example where you run the latest Ubuntu LTS release and do weekly or on demand updates. The current goal of the scanner is to avoid false positives and to be useful for daily analysis of a large number of systems. Note: When on Debian use debsecan instead! On FreeBSD use Portaudit.

Installation + Running

Download the scanner script, put it anywhere you like and run it like this

No need to run as root, any user will do. It just needs Please keep in mind that this is an experimental script which might report false positives and negatives!


Below you find a screenshot from a CentOS setup. Green lines indicate security advisory covering packages that are installed and up-to-date. Yellow lines indicate security advisories not applicable as the related packages are not installed. Red ones of course indicate a vulnerability.