RHEL5 Installed packages updated - How? When?
 

Not quite sure how to ask this, but here goes. I have a couple of RHEL5 servers that I am managing at work and I have to provide periodic security data (proof) the servers are patched.

example --
server was initially installed in early 2011 with
libXfont.x86_64 - 1.2.2-1.0.3.el5_1

There is a required update due in Aug. 2012 which should bring it to
libXfont-1.2.2-1.0.4.el5_7 - [RHSA-2011:1154-01] Important: libXfont security update

When I issue rpm -qa | grep libXfont it shows I am already at the newer version listed above.

I keep track of updates I install, (ie: yum update perl for instance). According to my records I have never manually updated libXfont. So I assume it was updated as part of another package, a pre-requisite perhaps?

My question is how can I show proof how/when libXfont was upgraded when I did not explicitly update it?

I hope this question/scenario makes sense.

Thanks...

"rpm -qi libXfont" should show when the rpm was installed.

Thanks acid kew_pie.

shows:
# rpm -qi libXfont | grep -i install
Install Date: Thu 11 Aug 2011 11:10:37 PM EDT Build Host: x86-004.build.bos.redhat.com
Install Date: Thu 11 Aug 2011 11:10:37 PM EDT Build Host: x86-002.build.bos.redhat.com

Problem is there is absolutely no way that I did anything on this server at 11;10pm on Aug. 11. This makes me wonder if somehow libXfont was automatically updated.



Looks like this rpm was built just two days prior -
# rpm -qi libXfont | grep -i release
Release : 1.0.4.el5_7 Build Date: Tue 09 Aug 2011 04:32:43 PM EDT
Release : 1.0.4.el5_7 Build Date: Tue 09 Aug 2011 04:32:44 PM EDT


One last thing, I looked at /var/log/yum.log and /var/log/yum.log.1 and there is no mention of libXfont at all. This still leaves me scratching my head.

Hi,

Are security updates automatically installed?

I'm asking 'cause of this: Important: libXfont security update / RHSA-2011:1154-1 (which you refer to).

Hope this helps.

druuna makes a good point; by default there is a daemon rhnsd that runs every 4 hrs checking for updates & it may also do the updates...

That was it, thanks. The rhnsd daemon was running (interval 240). The "Auto Errata Update" box was checked at the RHN site. I guess with this combination the security updates were automatically being installed.