On Tue, Jan 23, 2018 at 4:30 AM, Nis Martensen <nis.marten...@web.de> wrote: > It might be possible to determine whether an installed package is a > security update by inspecting the output of apt-cache policy pkgname. > Not sure if this information can also be obtained used python3-apt.
point releases usually include all the security updates from the previous point release, so they would come from the "main" repo and not the security one (also apt-cache policy would require to have the security.d.o source, which is not necessarily the case on every single machine) -- Sandro "morph" Tosi My website: http://sandrotosi.me/ Me at Debian: http://wiki.debian.org/SandroTosi G+: https://plus.google.com/u/0/+SandroTosi