Ensure the Latest Security Patches are Applied

高级别 1人工审核postgres

说明

PostgreSQL updates are released to resolve bugs, and mitigate vulnerabilities quarterly (or sooner for drastic CVEs). It is recommended that PostgreSQL installations are kept up to date with the latest security updates.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Run SHOW server_version; and compare the result with the latest minor release and the security announcements on https://www.postgresql.org/support/security/ (and your OS vendor advisories if using distro packages). A server that is not on the latest minor release of its major version is a fail.

修复方式

修复方法: 操作指南或基础设施补丁

Apply the latest minor release with the package manager (dnf update postgresql18* / apt upgrade postgresql-18) during a maintenance window, then restart PostgreSQL.

属性

操作系统: 任意
标签: postgresdatabasepatchingmanual
参考: CIS PostgreSQL 18 Benchmark v1.0.0 - 1.5 Ensure the Latest Security Patches are Applied