CentOS PCI Compliance assessment
Solution 1:
rpm -q <package name> will give you the software version number as well as the package release number, but you will need to investigate the contents of rpm --changelog <package name> in order to determine which patches have been applied.
Solution 2:
To list all packages:
rpm -qa
To list all packages matching a simple pattern:
rpm -qa 'kernel*'