BleachBit deletes junk to recover disk space and maintain privacy. It rids your system of old junk including cache, Internet history, temporary files, unused locale files (better than localepurge), logs, and cookies. Designed for Linux systems, it wipes clean 50 applications including Adobe Reader, Bash, Firefox, Flash, OpenOffice.org, Opera, Real Player, Skype, and more. It shreds files so that they cannot be recovered, and it wipes free disk space to hide insecurely deleted files. It offers both a simple PyGTK GUI and a command line interface for automation.
Chev is a sane by default vulnerability check script that checks NIST and US Cert RSS feeds for a short list of software that you configure. It has two levels of priority, warn and critical, which allows for easy use with Nagios as a stand-alone script or in a cron job. Just add strings for your major pieces of software and chev will tell you when a vulnerability has been released.