For auditing purpose, need to provide all the patches applied through zypper patch command. How to list all the patches installed in last 3 months

Question

We are using below command to install patches regularly

zypper patch -g security

Now we need to audit all the installed patches in last 3 months. Is there a way to get a list of all installed patches in the system. We are using Suse 12 Sp5. Thanks in advance

score 1 · Answer 1 · answered Apr 24 '21 at 07:49

To list all available patches, you could use

zypper search --type patch

and to limit these results to installed patches only, please use

zypper search --type patch --installed-only

Due to missing hints in the docs, I doubt that it's currently possible to limit the results to "security" patches only, so checking the type of a patch would need to be done in a separate step.

score 1 · Accepted Answer · edited Apr 20 '22 at 14:39

tux > zypper list-patches --all --cve

Issue | No. | Patch | Category | Severity | Status
------+---------------+-------------------+-------------+-----------+----------
cve | CVE-2015-0287 | SUSE-SLE-Module.. | recommended | moderate | needed
cve | CVE-2014-3566 | SUSE-SLE-SERVER.. | recommended | moderate | not needed
[...]

Source is chapter 6.1.3.2 / page 49 of Administration Guide - SUSE Linux Enterprise Server 12 SP5

Not sure of this apply to opensuse also.

For auditing purpose, need to provide all the patches applied through zypper patch command. How to list all the patches installed in last 3 months

2 Answers2