please use cron script in cron.daily. This will cause run debsecan AFTER apt, which means the debsecan cron will NOT be run before unattended-upgrades fix packages and will not report vulnerabilities fixed in cron.daily job. as a sideeffect it will: - simplify cron processing - show the cron job in dpkg -L output (bug #345256)
severity 773639 wishlist thanks * Matus UHLAR: We can't because we don't want all clients to hit the web server at the same time (in each time zone). Maybe I could change the automatically generated crontab to run after the cron.daily scripts, but I'm not sure if all systems run cron.daily at the same time. I can't fix this due to policy constraints. ghost file support (as in RPM) in dpkg would address this, though.
I believe this could be fixed by letting it waiting in the background for random time. They do not, especially with anacron. That's why it has to run from cron.daily job to run after apt. this would natively work if the cron job was part of the package.