Ensure latest version of Cassandra is installed

HighLevel 1Manual reviewcassandra

Description

The Cassandra installation version, along with the patches, should be the most recent that is compatible with organization's operational needs. When obtaining and installing software packages (typically via apt-get or you can compile the source code), it's imperative that packages (or the source code, tarball) are sourced only from valid and authorized repositories. Assessed manually here: the benchmark check is environment-specific and cannot be evaluated reliably by a single command.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Run cassandra -v (or nodetool version) on every node and compare with the Apache Cassandra download page. The release must be a supported series and the latest patch of it; an old or unsupported version is a finding.

How it is fixed

Fix method: Guidance or infrastructure patch

Upgrade to the latest version of the Cassandra software: For each node in the cluster: 1. Using the nodetool drain command to push all memtables data to SSTables. 2. Stop Cassandra services. 3. Backup the data set and all of your Cassandra configuration files. 4. Download/Update Java if needed. 5. Download/Update Python if needed. 6. Download the binaries for the latest Cassandra revision from the Cassandra Download Page. 7.

Properties

Operating systems: Any
Tags: cassandrapatching
Reference: CIS Apache Cassandra 5.0 Benchmark v1.1.0 - 1.4 Ensure latest version of Cassandra is installed