Ensure latest version of Cassandra is installed

高レベル 1手動レビューcassandra

説明

The Cassandra installation version, along with the patches, should be the most recent that is compatible with organization's operational needs. When obtaining and installing software packages (typically via apt-get or you can compile the source code), it's imperative that packages (or the source code, tarball) are sourced only from valid and authorized repositories. Assessed manually here: the benchmark check is environment-specific and cannot be evaluated reliably by a single command.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Run cassandra -v (or nodetool version) on every node and compare with the Apache Cassandra download page. The release must be a supported series and the latest patch of it; an old or unsupported version is a finding.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Upgrade to the latest version of the Cassandra software: For each node in the cluster: 1. Using the nodetool drain command to push all memtables data to SSTables. 2. Stop Cassandra services. 3. Backup the data set and all of your Cassandra configuration files. 4. Download/Update Java if needed. 5. Download/Update Python if needed. 6. Download the binaries for the latest Cassandra revision from the Cassandra Download Page. 7.

プロパティ

オペレーティングシステム: すべて
タグ: cassandrapatching
参照: CIS Apache Cassandra 5.0 Benchmark v1.1.0 - 1.4 Ensure latest version of Cassandra is installed