search

trams242 / sshupdate

nicely update servers via ssh
GNU General Public License v2.0
1 stars 2 forks source link

Server pacakge should check changelogs for cves. #36

Open trams242 opened 10 years ago

trams242 commented 10 years ago

When checking for missing packages, sshupdate server component should create lists of CVE:s that a machine is vulnerable to by grabbing that from rpm changelog

Ex: rpm -q --changelog kernel-2.6.32-358.23.2.el6.x86_64

yum-changelog might also be of interest for this.