rpm -q --changelog openssl

Latest response

When I run the command below on my system
rpm --query --changelog openssl |grep CVE-2016-2108

and the response is below, does that mean that this CVE is patched on this system?

  • fix CVE-2016-2108 - memory corruption in ASN.1 encode

The reason I ask is in some CVE's it says "fixed" while other say"fix" Does that matter?

Responses