I have a Redhat Application Server 4 Update 4

1)how do i find out what are the security patches needed for my server?

2)Do i have to check for each and every rpm , if there are any bug fixes or security patches.

3)Is there a way to get a summary of what are the security/bug fixes patches required for my server

I used up2date to register and download patches. when i use up2date -l it gives me a summary of my current patch and the updated patch required.
But i dont know if they are important security patches or bugfixes.

Please guide me .

If unsure, don't upgrade. But really the only way to find out if a security upgrade or patch is necessary is to know what your server uses, what your applications use, then go read the changelogs and or security notices for what you feel should be upgraded. It's your system, we don't know what you need and what you don't need. Best thing to do is to subscribe to mailing lists so you are notified when updates are available and why. At least then you are given a brief description of or about the update.

Also if this is a production type server, always perform upgrades and updates on a test or qa type server before applying them to a machine that actually matters.

Thank you. Appreciate your reply.

doesn't redhat have a cluster of security patches for each OS and version.I mean a generic base similar to solaris cluster patches.

If your running redhat, you should have a login at Redhat Network that will show you all the packages on your system and what errata is available.

once you log in and select the packages you would like to upgrade, just type in rhn_check in the terminal and it will fetch and install what you selected through the webpage

frndrfoe, Thank you.

If i register my system on redhat network, is there any security threat?
Please share with me your view about the same.

Can anyone help me.

Please let me know if registering the server on the redhat networks is afe..

what does the registration do apart from download latest patches.

I have several servers and workstations(30-35) registered with redhat and have had no problems. Communication is encrypted and part of registration should install redhat's public key.