How to update Linux Debian packages manually & automatically?
Debian patch management across the multitude of endpoints in your network is undoubtedly a necessary evil. With over 600 active Linux distros and Debian accounting for ~16% of the Linux market, it is crucial to understand how to update Debian packages to prevent vulnerabilities from exploiting the endpoints in your network.
This article talks in detail about the following:
What is a Debian update?
Debian update refers to the process of upgrading the Debian packages to the latest versions. It is imperative to update and upgrade Debian to ensure that the OS receives the latest features as well as security updates.
Debian, also known as Debian GNU/Linux, is a Linux distribution that comprises of free and open source software. It was developed to aid advanced users in the Linux community which gained Popularity among users for its high scalability and technical excellence.
It is known to be the first distribution to include a package management system. Due to its pioneering work in Linux distributions, Debian has a large user base. Hence it is important to stay informed about the various Debian updates and patches.
When are Debian updates released?
Debian updates do not follow a fixed schedule. The latest Debian update - Debian 11 codenamed bullseye, was released on August 14, 2021. The release comprised of corrections for security updates as well as new software (11,294 new packages). Debian's stable versions are updated roughly once bimonthly.
How to install a Debian update manually?
To install Debian security updates, connect to your Debian system via SSH. Once you are in the terminal, enter the following commands:
- grep security /etc/apt/sources.list | tee /etc/apt/security.sources.list
- apt-get update
- apt-get upgrade -o Dir::Etc::SourceList=/etc/apt/security.sources.list
- Type Y and press Enter. Security updates will be installed and your system will be up to date.
To check and apply updates at a later stage do this:
- apt-get update
- apt-get upgrade -o Dir::Etc::SourceList=/etc/apt/security.sources.list
How to update Debian packages automatically using Patch Manager Plus?
With ManageEngine Patch Manager Plus, you can update Debian packages automatically as well as automate the deploying of security updates to endpoints completely. The entire process of Debian patch management - from scanning the machines for missing updates, downloading these updates, testing them in your work environment for anomalies, and deploying them to the respective client machines is fully automated. To handle Debian security updates:
- Sync the patch database for information regarding the newly released Debian updates. You can either schedule the sync between the patch database and the Patch Manager Plus server or you can manually initiate the sync by navigating to Deployment --> Update Vulnerability DB.
- Scan the client machines for the missing updates by navigating to Systems --> Scan systems.
- Navigate to Missing patches and click on the update to be installed. Install these updates at a time of your convenience.
- You can also create an Automated Patch Deployment (APD) task specifically for Debian updates that will iteratively run every time a missing Debian update is detected in your client machines running Debian OS.
- You can further test these updates on a pilot group of systems running Debian OS before deploying them in bulk. Navigate to Deployment --> Test and Approve --> Create test group. There are options to automatically approve the tested updates as well.
- Further, there are also options to generate extensive reports on the entire patching process.
Thereby, with Patch Manager Plus, we can completely automate the process of deploying Debian updates to your endpoints.
FAQs
1) What is the latest version of Debian?
The latest version of Debian is Debian 11, codenamed bullseye. It's latest update 11.5 has been released on September 10, 2022.
2) How do I get the latest version of Debian?
To upgrade to the latest version of Debian, follow the steps given below:
- Ensure that the system has been backed up.
- Update the existing Debian packages by running the command: apt-get update && apt-get upgrade
Once done, restart the system.
- Using a text editor, edit the following file:
/etc/apt/sources.list -> Replace every instance of the old Debian OS (ex. buster or stretch) with bullseye.
Note: If you're updating from Debian 10 to Debian 11, replace buster/updates with bullseye-security.
- Update the packages index by running the command: sudo apt update
- Once done, prepare the system for the upgrade by typing the command: sudo apt upgrade --without-new-pkgs
- Lastly, run the following command to update to Debian 11: sudo apt full-upgrade
- Reboot the system ensure that the system has been successfully updated.
3) Which command is used to update a Debian system to the latest software?
sudo apt-get update and sudo apt-get upgrade are the two commands to fetch the latest version of the package list from the distro's software/third-party repositories, and download/install the updates for each outdated package and dependency on the systems respectively.
4) How do I see patches in Linux?
To find the list of available patches/updates in Linux, run the following commands:
| Linux flavors |
Commands |
| CentOS/RHEL/Oracle Linux |
- sudo yum check-update
- sudo yum updateinfo
|
| Debian/Ubuntu/Linux mint |
- sudo apt update
- sudo apt list --upgradable
|
| OpenSUSE/SUSE Enterprise |
- sudo zypper refresh
- zypper list-updates
|
5) How do I enable patch management?
To enable Debian patch management through Patch Manager Plus, follow the steps given below:
- Ensure that the agents have been installed in the systems.
- Once the managed systems have been scanned successfully for the missing patches, navigate to Patches > Missing Patches.
- You can get a list of the missing patches along with the count of the systems that are missing the patches.
- Select the Debian patches/security updates that need to be deployed to the missing systems and click on Install/Publish Patches.
- Specify the deployment policy and add/filter the required targets.
- Once the settings have been specified, click on Deploy or Deploy Immediately based on your requirements.
6) How to upgrade version of Debian?
To update Linux Debian to the latest version, follow the steps mentioned below:
- Create a backup of the system.
- Run the command apt-get update && apt-get upgrade to update the existing Debian packages. Once done, restart the system.
- Edit the following file, using a text editor:
/etc/apt/sources.list -> Replace every instance of the old Debian OS (ex. buster or stretch) with the newer version.
- Update the packages index by running the command: sudo apt update
- Once done, prepare the system for the upgrade by typing the command: sudo apt upgrade --without-new-pkgs
- Finally, run the following command to update to the update Linux Debian: sudo apt full-upgrade
Reboot the system ensure that the system has been successfully updated.
7) Can you upgrade from Debian 9 to 11?
Yes, you can upgrade from Debian 9 (stretch) to Debian 11 (bullseye). However, versions below Debian 9 cannot be upgraded to the latest version directly.
