STIGQter STIGQter: STIG Summary: Oracle MySQL 8.0 Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Jan 2021:

Security-relevant software updates to the MySQL Database Server 8.0 must be installed within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).

DISA Rule

SV-235194r638812_rule

Vulnerability Number

V-235194

Group Title

SRG-APP-000456-DB-000390

Rule Version

MYS8-00-012300

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Institute and adhere to policies and procedures to ensure that patches are consistently applied to MySQL within the time allowed.

Check Contents

To check the version of the installed MySQL, run the following SQL statement:

select @@version;

The result will show the version, for example:
8.0.22-commercial

Obtain evidence that software MRU updates are consistently applied to MySQL Server within the time frame defined for each update. To be considered supported, Oracle must report that the version is supported by security patches to known vulnerability.

Review the MySQL Support dates at the following link:
https://www.oracle.com/support/lifetime-support/resources.html

Review the MySQL Release notes page:
https://dev.mysql.com/doc/relnotes/mysql/8.0/en/

If MySQL Enterprise Edition 8.0 is not at the latest version, this is a finding.

Vulnerability Number

V-235194

Documentable

False

Rule Version

MYS8-00-012300

Severity Override Guidance

To check the version of the installed MySQL, run the following SQL statement:

select @@version;

The result will show the version, for example:
8.0.22-commercial

Obtain evidence that software MRU updates are consistently applied to MySQL Server within the time frame defined for each update. To be considered supported, Oracle must report that the version is supported by security patches to known vulnerability.

Review the MySQL Support dates at the following link:
https://www.oracle.com/support/lifetime-support/resources.html

Review the MySQL Release notes page:
https://dev.mysql.com/doc/relnotes/mysql/8.0/en/

If MySQL Enterprise Edition 8.0 is not at the latest version, this is a finding.

Check Content Reference

M

Target Key

5277

Comments