Ubuntu to list relevant security advisories

In addition to the option you gave:

apt-get -s dist-upgrade |grep "^Inst" |grep -i securi 

You could try:

unattended-upgrade --dry-run -d

and

/usr/lib/update-notifier/apt-check -p

(Seen on Ask Ubuntu)