Debian has a JSON file containing all CVE<->Fixed package versions map. Link: https://security-tracker.debian.org/tracker/data/json

Does Ubuntu have something similar?


1 Answer 1


There is the Ubuntu Security Advisory. It provides a mailing list, RSS feed, and Atom feed.

There is no API for historical data, according to a similar question on AskUbuntu.

  • Thank you for the replay. The feeds only contains the latest vulnerabilities without historic data. I'm looking for en exhaustive list. But thank you for the replay.
    – drdrek
    Jun 18, 2018 at 11:21
  • @drdrek See my update. This question was also asked on AskUbuntu.
    – forest
    Jun 19, 2018 at 3:06
  • 1
    Just for completeness sake I would like to say that there is a better way to programmatically go over historic security information. We ended up going over the Ubuntu security repository getting the information by iterating over their files: bazaar.launchpad.net/~ubuntu-security/ubuntu-cve-tracker/master/…. I will keep your answer as the accepted answer because this is a very niche solution that is probably not relevant for most people. Its very disappointing that a such large distribution like Ubuntu lags behind so much on security visibility.
    – drdrek
    Jun 27, 2018 at 13:54

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .