nerdexam
Oracle

1Z0-460 · Question #42

Finding a directive issued by your organization listing several important CVEs (Common Vulnerability and Exposures), you find one for Linux OpenSSH (CVE-2006-5764), which might apply to your oracle…

The correct answer is C. rpm -q - - changelog openssh | grep 5794. The command rpm -q --changelog rpm displays a detailed list of information (updates, configuration, modifications, etc.) about a specific package. This example shows information about the package rpm. However, only the last five change entries in the RPM database are listed…

Package Management

Question

Finding a directive issued by your organization listing several important CVEs (Common Vulnerability and Exposures), you find one for Linux OpenSSH (CVE-2006-5764), which might apply to your oracle Linux systems. What command would help ensure that a patch has been applied to close this vulnerability on an Oracle Linux 6 system running OpenSSH server?

Options

  • Ayum listcves openssh
  • Brpm -qa | grep openssh | grep 5794
  • Crpm -q - - changelog openssh | grep 5794
  • Dyum sec -list cves | grep 5794
  • Eyum sec -list cvesApplied

How the community answered

(24 responses)
  • A
    8% (2)
  • C
    79% (19)
  • D
    8% (2)
  • E
    4% (1)

Explanation

The command rpm -q --changelog rpm displays a detailed list of information (updates, configuration, modifications, etc.) about a specific package. This example shows information about the package rpm. However, only the last five change entries in the RPM database are listed. All entries (dating back the last two years) are included in the package itself. This query only works if CD 1 is mounted at /media/cdrom: rpm -qp --changelog /media/cdrom/suse/i586/rpm-3.rpm *Is the patch RPM suitable for my system? To check this, first query the installed version of the package. For pine, this can be done with

Topics

#CVE#rpm changelog#security patch#OpenSSH

Community Discussion

No community discussion yet for this question.

Full 1Z0-460 Practice