Hi, is there a way / software to find out which security patches my different CentOS systems are missing? Maybe with the according CESA announcement displayed? TIA, Frank.
On 01/19/2010 10:32 AM, Frank.Brodbeck at klingel.de wrote:> is there a way / software to find out which security patches my > different CentOS systems are missing? Maybe with the according > CESA announcement displayed?I am working on a bit of code that would make something like this possible in the near future ( ~ a month or so ). However, till then I'd recommend going with just yum list and if you want, some mangling with yum-changelog will give you cve's and bz's. -- Karanbir Singh London, UK | http://www.karan.org/ | twitter.com/kbsingh ICQ: 2522219 | Yahoo IM: z00dax | Gtalk: z00dax GnuPG Key : http://www.karan.org/publickey.asc
From: "Frank.Brodbeck at klingel.de" <Frank.Brodbeck at klingel.de>> is there a way / software to find out which security patches my > different CentOS systems are missing? Maybe with the according > CESA announcement displayed?Try the yum-security package... JD
> is there a way / software to find out which security patches my > different CentOS systems are missing? Maybe with the according > CESA announcement displayed?I'll put in a plug for a software project that I am developer/contributor for, OpenVAS (Open Vulnerability Assessment Scanner). http://www.openvas.org If you configure OpenVAS to use a SSH enabled login account, it will tell you which security patches you are missing. If you do just a remote scan, it will give you an incomplete list of missing patches. It is cross-platform too. -geoff --------------------------------- Geoff Galitz Blankenheim NRW, Germany http://www.galitz.org/ http://german-way.com/blog/
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 19/01/2010 11:49, John Doe wrote:> Try the yum-security package...Since when does it work for centos ? - -- best regards, markus -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAktXd2YACgkQYoWFBIJE9eW6SwCgrXRKP0MJVsLOas5QvbiGLEqO ewQAniSWT7DD3M8DQQ3oCSXXNEDmvjTK =wdBR -----END PGP SIGNATURE-----