4.1 Ensure the Latest Security Patches are Applied

Information

Periodically, updates to MySQL server are released to resolve bugs, mitigate vulnerabilities, and provide new features. It is recommended that MySQL installations are up to date with the latest security updates.

Rationale:

Maintaining currency with MySQL patches will help reduce risk associated with known vulnerabilities present in the MySQL server.

Without the latest security patches MySQL might have known vulnerabilities which could be used by an attacker to gain access.

Impact:

To update the MySQL server a restart is required.

Solution

Install the latest patches for your version or upgrade to the latest version.

See Also

https://workbench.cisecurity.org/files/3859

Item Details

Category: SYSTEM AND SERVICES ACQUISITION

References: 800-53|SA-22, CSCv7|2.2

Plugin: MySQLDB

Control ID: adb5844d0561eeb33fea6c5822490c2372ce16060c95788026659bf1bb4ec5dc