TMAegis
More rules for mysql

TMA-MYSQL-4.1

Ensure the Latest Security Patches are Applied

HighLevel 1Manual reviewmysql

Description

Periodically, updates to MySQL server are released to resolve bugs, mitigate vulnerabilities, and provide new features. It is recommended that MySQL installations are up to date with the latest security updates.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Run SHOW VARIABLES WHERE Variable_name LIKE 'version'; and compare with the latest release and security announcements from Oracle (Critical Patch Updates) and your OS vendor. An outdated release is a fail.

How it is fixed

Fix method: Guidance or infrastructure patch

Upgrade MySQL to the latest release of the installed series with the package manager during a maintenance window and run the upgrade steps for the release.

Properties

Operating systems
Any
Tags
mysqldatabasepatchingmanual
Reference
CIS Oracle MySQL Community Server 8.4 Benchmark v1.1.0 - 4.1 Ensure the Latest Security Patches are Applied