Package: debsecan
Version: 0.4.20.1
Followup-For: Bug #1038952
X-Debbugs-Cc:
cquike@arcor.de
Hi,
in addition to adding support for newer suites I think it would make sense to default to the suite from which this package has been installed, if that's possible.
The problem I see with the current behaviour is that you get an email with an awful long list of CVEs which are not relevant to the current installation. That can easily lead to users ignoring the list completely or removing this package. I was actually going to do that when I realized that it is possible to have some reasonable settings. If you manage a handful of machines it would be beneficial if the default installation has a useful configuration.
-- System Information:
Debian Release: 12.5
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable'), (100, 'bookworm-fasttrack'), (100, 'bookworm-backports-staging')
Architecture: amd64 (x86_64)
Kernel: Linux 6.1.0-18-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages debsecan depends on:
ii ca-certificates 20230311
ii debconf [debconf-2.0] 1.5.82
ii python3 3.11.2-1+b1
ii python3-apt 2.6.0
Versions of packages debsecan recommends:
ii cron [cron-daemon] 3.0pl1-162
ii exim4-daemon-light [mail-transport-agent] 4.96-15+deb12u4
debsecan suggests no packages.
-- debconf information:
debsecan/report: true
debsecan/source:
debsecan/suite: GENERIC
debsecan/mailto: root
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)