天天看點

RH413 Unit1 Tracking Secutiry Updates

這個系列文章隻是我的學習筆記而已,我的實驗環境是在RHEL6下進行的。

Common Vulnerabilities and Exposures(CVE) is a standardized format for reporting and tracking security related software issues.The Community web presence and management of the CVE compatibility program is handle by the MITRE Corporation.CVE format is also used for the National Vulnerability Database(NVD) managed by the U.S National Institutes of Standards and Technology(NIST)             

References Website:

https://cve.mitre.org

National Vulnerability Database:

https://nvd.nist.gov

After a bug fix, vulnerability fix, of feature enhancement has been addressed in the Red Hat distributed software package, Red Hat will issue an errata announcement. There are three types of errata announcements:             

Prerequisites:

We should install yum security plug  
yum-plugin-security.noarch             

Manual:

The main command in security update: