CentOS 7 CVE Repository

[praving5]

Hi,
Like how RHEL provides the OVAL content for checking against security patches, does CentOS provides something?
https://www.redhat.com/security/data/oval/

Basically, how do I assess a CentOS system for missing patches and generate a report around it?

Thanks and regards,
Pravin Goyal

[avij]

As far as I know, the CentOS Project has never published OVAL data for CentOS.

yum check-update should show which packages are available for updating. Perhaps you could write some wrapper around that, if you don't want to apply the updates automatically.

The yum-cron package can also be used to mail reports of pending updates.

[zepoye]

Hi,

is there something like https://www.redhat.com/security/data/oval/ in CentOS?

Thanks.

[avij]

As far as I know, the situation is unchanged since my last reply to this topic.

[TrevorH]

As far as I know there are no plans for it to change either.