Yes it is possible.
CVE is a dictionary of publicly known information security vulnerabilities and exposures. If we know the CVE number, we can check if RHEL has fixed the threat in our systems by checking the CVE number here.
So in my case, the CVE number was CVE-2008-5161. I checked for the CVE number in the above mentioned link and found that the fix for
openssh was provided in the package provided by the update of this rpm.
So, I ran the query
ssh -V which gives me the output as,
But the above query just returns the version.
However, I need to know if the patch
openssh-4.3p2-36 is applied to my system. The RHEL updates are applied in patches which do not update the package numbers. So, for example, if RHEL 5 systems have the OpenSSH version of 4.3 installed, the updates will not make it to the next 4.4 version but rather fix the same version but in patches. This feature is known as backporting in RHEL. So, for the security threat that I had faced, I need to verify the patch 36 is installed in my system. I can check the same using the command,
rpm -qa | grep -i ssh
The above command returns me the output as,
This means I have the latest security patch provided by RHEL available in my system.