TMA-POSTGRES-1.5
Ensure the Latest Security Patches are Applied
Opis
PostgreSQL updates are released to resolve bugs, and mitigate vulnerabilities quarterly (or sooner for drastic CVEs). It is recommended that PostgreSQL installations are kept up to date with the latest security updates.
Kako se proverava
Metod provere: Ručni pregled
Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.
Run SHOW server_version; and compare the result with the latest minor release and the security announcements on https://www.postgresql.org/support/security/ (and your OS vendor advisories if using distro packages). A server that is not on the latest minor release of its major version is a fail.
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Apply the latest minor release with the package manager (dnf update postgresql18* / apt upgrade postgresql-18) during a maintenance window, then restart PostgreSQL.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- postgresdatabasepatchingmanual
- Referenca
- CIS PostgreSQL 18 Benchmark v1.0.0 - 1.5 Ensure the Latest Security Patches are Applied