Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I just logged into my new rented server and updated openssl because of the heartbleed-bug ( I updated using

yum list openssl
Installed Packages
openssl.x86_64                                        1.0.1e-16.el6_5.4                                         @updates
Available Packages
openssl.i686                                          1.0.1e-16.el6_5.7                                         updates
openssl.x86_64                                        1.0.1e-16.el6_5.7                                         updates

yum update openssl
--> Running transaction check
---> Package openssl.x86_64 0:1.0.1e-16.el6_5.4 will be updated
---> Package openssl.x86_64 0:1.0.1e-16.el6_5.7 will be an update
--> Finished Dependency Resolution
Running Transaction
Updating   : openssl-1.0.1e-16.el6_5.7.x86_64                                                                     1/2
Cleanup    : openssl-1.0.1e-16.el6_5.4.x86_64                                                                     2/2
Verifying  : openssl-1.0.1e-16.el6_5.7.x86_64                                                                     1/2
Verifying  : openssl-1.0.1e-16.el6_5.4.x86_64                                                                     2/2

openssl.x86_64 0:1.0.1e-16.el6_5.7


That way I got my openssl updated. But how do you know which bug was fixed in which version? I tried with

yum history package-info openssl

but that only tells me the history of the package on my machine. Do details about the package itself.

So I googled and found There I can see the openssl package my system had at installation (in March 2014): openssl-1.0.1e-15.el6.x86_64

The 1st update (same day in March) updated it the version from current of that day (openssl-1.0.1e-16.el6_5.4.x86_64.rpm).

Today I updated to openssl-1.0.1e-16.el6_5.7.x86_64.rpm.

So I know the history of my system. My question is: Does CentOS/RedHat provide a changelog for the packages itself (e.g. "Heartbleed bug fixed, see ....")? Is there a page for this?

Thanks, Blama

share|improve this question
up vote 3 down vote accepted

The canonical tool for managing RPM packages is rpm.

To query the Changelog of an RPM package the command would be:

rpm -q --changelog openssl
share|improve this answer
Thank you! Exactly what I was looking for. – Blama Apr 8 '14 at 11:45

You can also check the changelog of unistalled packages with the repoquery command with is part of yum-utils package.

repoquery -q --changelog httpd | less
share|improve this answer

protected by Michael Hampton Apr 8 '14 at 13:11

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.