Check for CVE fixs
To check if a CVE has been patched on a RHEL based system perform the following.
First, get the real package name:
rpm -qa | grep <package>
Now check the package change log for CVE patches:
rpm -q <package> --changelog | grep <cve number>