Details

Installing software updates is a fundamental mitigation against the exploitation of publicly-known vulnerabilities.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

If the system is joined to Oracle’s Unbreakable Linux Network or an internal YUM server, run the following command to install updates

# yum update

If the system is not configured to use one of these sources, updates (in the form of RPM packages) can be manually downloaded from Oracle’s Unbreakable Linux Network and installed using the ‘rpm’ command.

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_6_V1R18_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Unix.

References

• 800-53|SI-2(2)
• CAT|II
• CCI|CCI-001233
• Group-ID|V-50695
• Rule-ID|SV-208798r603263_rule
• STIG-ID|OL6-00-000011
• STIG-Legacy|SV-64901
• STIG-Legacy|V-50695
• Vuln-ID|V-208798

Source

• Tenable.com/audits