TMA-POSTGRES-1.5

Ensure the Latest Security Patches are Applied

높음레벨 1수동 검토postgres

설명

PostgreSQL updates are released to resolve bugs, and mitigate vulnerabilities quarterly (or sooner for drastic CVEs). It is recommended that PostgreSQL installations are kept up to date with the latest security updates.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Run SHOW server_version; and compare the result with the latest minor release and the security announcements on https://www.postgresql.org/support/security/ (and your OS vendor advisories if using distro packages). A server that is not on the latest minor release of its major version is a fail.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Apply the latest minor release with the package manager (dnf update postgresql18* / apt upgrade postgresql-18) during a maintenance window, then restart PostgreSQL.

속성

운영 체제: 모두
태그: postgresdatabasepatchingmanual
참고 자료: CIS PostgreSQL 18 Benchmark v1.0.0 - 1.5 Ensure the Latest Security Patches are Applied