rpm -q --changelog openssl
When I run the command below on my system
rpm --query --changelog openssl |grep CVE-2016-2108
and the response is below, does that mean that this CVE is patched on this system?
- fix CVE-2016-2108 - memory corruption in ASN.1 encode
The reason I ask is in some CVE's it says "fixed" while other say"fix" Does that matter?