Checking CVE patched on current installed version of VRLCM

Products

• VMware Aria Suite

Issue/Introduction

The VRLCM development team have added a check list to the application change log for all addressed CVE patched on the current version.

Environment

VRLCM 8.x

Resolution

In order to review the application change log to see if a CVE has or has not been addressed by the installed version . 

Use the following command 

rpm -qa --changelog | grep -A 2 "CVE-#"

Example
rpm -qa --changelog | grep -A 2 "CVE-2024-52533"

If results are returned then the CVE has been addressed in the current version and no further review is needed. 

If no results are returned then further review is required