debsecan in Ubuntu

[Florian Weimer]

* Stephan Hermann:

> Well, if someone can give me a hint, why it shouldn't work on
> ubuntu?

There is no database which maps CVE names to the Ubuntu package
version where the bug has been fixed (or, if it hasn't been fixed, the
affected Ubuntu package).

Of course, you could blindly use the database maintained by Debian's
testing security team, but this will definitely give wrong results in
some cases.