How to know centOS or a package is vulnerable

DelMab · 06-11-2015, 06:27 AM

Hello

How do we know centos or a package is vulnerable and needs to be patched and how do we patch them?

Many thanks

Del

jpollard · 06-11-2015, 07:05 AM

Normally, patches are provide by distribution - and applying them is done either by "yum update" which will go and locate all the updates available, or "dnf update" (options may apply to either).

You can check for update using either yum or dnf. Check the manpage for details.

PS: by definition, every package is "vulnerable", just what the vulnerability is may be unknown..

sundialsvcs · 06-11-2015, 08:37 AM

Best-practice would be to check for updates to your distro at least once a day, and to apply them all immediately.