CentOS - Jul 2009 - Tracking specific fixes into backports

I apologize if this is a simple noob question - I looked around and couldn't
find an easy answer.

My auditor presenting me with some findings re: httpd (apache) and said I
have to upgrade to the newest version. They are basing their findings on the
"version" of Apache installed - but are unaware of the fixlevel.

Is there an easy way that I can take a specific Mitre or Securityfocus issue
and see if the fix has been backported into the most up to date version of a
Centos RPM. While this particular instance is in regards to Apache, I
suspect I'll have to do this some more in the future with other RPMs as
well.

Thanks for any insight.

-- 
Andy Akins
Director of Development

NICUSA, Tennessee ? A Partnership with Tennessee.gov
Phone: (615) 313-0305
Email: andy at egovtn.org

Visit www.tn.gov - the official website of the State of Tennessee

*****************************************************************
CONFIDENTIALITY NOTICE:
This email and any attachments are confidential. If you are not
the intended recipient, you do not have permission to disclose,
copy, distribute, or open any attachments. If you have received
this email in error, please notify us immediately by returning
it to the sender and deleting this copy from your system.
  Thank you. NIC, Inc., Tennessee
*****************************************************************

On Tue, 2009-07-28 at 13:16 -0500, Andy Akins wrote:
> I apologize if this is a simple noob question - I looked around and
couldn't
> find an easy answer.
> 
> My auditor presenting me with some findings re: httpd (apache) and said I
> have to upgrade to the newest version. They are basing their findings on
the
> "version" of Apache installed - but are unaware of the fixlevel.
> 
> Is there an easy way that I can take a specific Mitre or Securityfocus
issue
> and see if the fix has been backported into the most up to date version of
a
> Centos RPM. While this particular instance is in regards to Apache, I
> suspect I'll have to do this some more in the future with other RPMs as
> well.
> 
> Thanks for any insight.
----
maybe this is what you are asking for...

rpm -q --changelog httpd

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.