TMA-MYSQL-4.1
Ensure the Latest Security Patches are Applied
Description
Periodically, updates to MySQL server are released to resolve bugs, mitigate vulnerabilities, and provide new features. It is recommended that MySQL installations are up to date with the latest security updates.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Run SHOW VARIABLES WHERE Variable_name LIKE 'version'; and compare with the latest release and security announcements from Oracle (Critical Patch Updates) and your OS vendor. An outdated release is a fail.
How it is fixed
Fix method: Guidance or infrastructure patch
Upgrade MySQL to the latest release of the installed series with the package manager during a maintenance window and run the upgrade steps for the release.
Properties
- Operating systems
- Any
- Tags
- mysqldatabasepatchingmanual
- Reference
- CIS Oracle MySQL Community Server 8.4 Benchmark v1.1.0 - 4.1 Ensure the Latest Security Patches are Applied