RPM check for security updates

rpm –changelog option

Use the command as follows:

rpm -q --changelog {package-name}

rpm -q --changelog {package-name} | more

rpm -q --changelog {package-name} | grep CVE-NUMBER

EX:

# rpm -q --changelog perl|grep CVE-2008-1927

List all applied patches for php, enter:

# rpm -q --changelog php

OR

# rpm -q --changelog php | more

To query rpm file, enter:

$ rpm -qp --changelog rsnapshot-1.3.0-1.noarch.rpm | more

List available:

# yum updateinfo list available

List all available security updates without installing

# yum updateinfo list security all

# yum updateinfo list sec

List currently installed:

# yum updateinfo list security installed