列出所有可用的安全补丁,并且显示其详细信息:
# yum info-sec . . =============================================================================== tzdata bug fix and enhancement update =============================================================================== Update ID : RHBA-2019:0689 Release : 0 Type : bugfix Status : final Issued : 2019-03-28 19:27:44 UTC Description : The tzdata packages contain data files with rules for various : time zones. : : The tzdata packages have been updated to version : 2019a, which addresses recent time zone changes. : Notably: : : * The Asia/Hebron and Asia/Gaza zones will start : DST on 2019-03-30, rather than 2019-03-23 as : previously predicted. : * Metlakatla rejoined Alaska time on 2019-01-20, : ending its observances of Pacific standard time. : : (BZ#1692616, BZ#1692615, BZ#1692816) : : Users of tzdata are advised to upgrade to these : updated packages. Severity : None
如果你想要知道某个更新的具体内容,可以运行下面这个命令:
# yum updateinfo RHSA-2019:0163 -
Loaded plugins: changelog, package_upload, product-id, search-disabled-repos, subscription-manager, verify, versionlock rhel-7-server-rpms | 2.0 kB 00:00:00 =============================================================================== Important: kernel security, bug fix, and enhancement update =============================================================================== Update ID : RHSA-2019:0163 Release : 0 Type : security Status : final Issued : 2019-01-29 15:21:23 UTC Updated : 2019-01-29 15:23:47 UTC Bugs : 1641548 - CVE-2018-18397 kernel: userfaultfd bypasses tmpfs file permissions : 1641878 - CVE-2018-18559 kernel: Use-after-free due to race condition in AF_PACKET implementation CVEs : CVE-2018-18397 : CVE-2018-18559 Description : The kernel packages contain the Linux kernel, the core of any : Linux operating system. : : Security Fix(es): : : * kernel: Use-after-free due to race condition in : AF_PACKET implementation (CVE-2018-18559) : : * kernel: userfaultfd bypasses tmpfs file : permissions (CVE-2018-18397) : : For more details about the security issue(s), : including the impact, a CVSS score, and other : related information, refer to the CVE page(s) : listed in the References section. : : Bug Fix(es): : : These updated kernel packages include also : numerous bug fixes and enhancements. Space : precludes documenting all of the bug fixes in this : advisory. See the descriptions in the related : Knowledge Article: : https://access.redhat.com/articles/3827321 Severity : Important updateinfo info done
(编辑:ASP站长网)
|