Comparing BigFix vs Yum Update for RHEL 7 server

1

Hi Guys,

I have a query. As a patch administrator, i did the patching of one of the RHEL server from Bigfix. I deployed all the patches which were applicable to that RHEL server. Once all the patches were completed and the server was rebooted. The RHEL system and server administrator checked for pending updates onto the newly patched RHEL server by running the command yum check-update.
So he found 8-9 patches as pending onto that server, but in BigFix console i am not finding any pending patches.

Can someone help me on this issue.

Thanks in advance.
KK

2

Which patches / packages are being reported?

Generally those may be non-security updates, or something from an ‘optional’ channel or something like that.

3

Hi @JasonWalker whats optional channel ?

4
5

It depend on the which repo the client is pointing towards and could be those patches are pending.

6

Hi @JasonWalker

The packages which the RHEL admin are getting after running check yum update is :

rhn-check.x86_64

rhn-Client-tools. x86_64

rhn-Setup. x86_64

rhn-Setup-gnome. x86_64

7

Ok, those packages are involved in setting up the client to use Red Hat Network or Satellite Server. You don’t need to update them.

On the BigFix side, I’m not sure we would have a fixlet for every possible piece of software published by Red Hat.

2 Likes
8

Hi @JasonWalker I have share this information with the Linux Admin team and they have accepted that the list which they were getting after running yum update all command were not the security patches. Thanks once again…