Open SCAP + libguestfs:
Your guest needs these patches ...
Your guest is vulnerable to these CVEs ...