Navigate

Check: UBTU-16-010000

Canonical Ubuntu 16.04 LTS STIG: UBTU-16-010000 (in version v2 r3)

Title

The Ubuntu operating system must be a vendor supported release. (Cat I impact)

Discussion

An Ubuntu operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.

Check Content

Verify the version of the Ubuntu operating system is vendor supported. Check the version of the Ubuntu operating system with the following command: # cat /etc/lsb-release DISTRIB_RELEASE=16.04 DISTRIB_CODENAME=xenial DISTRIB_DESCRIPTION="Ubuntu 16.04.1 LTS" Validate that "Extended Security Maintenance" support has been purchased from the vendor. If the operating system does not have a documented "Extended Security Maintenance" agreement in place, this is a finding.

Fix Text

Upgrade to a supported version of the Ubuntu operating system.

Additional Identifiers

Rule ID: SV-214939r648696_rule

Vulnerability ID: V-214939

Group Title: SRG-OS-000480-GPOS-00227

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-001230	The organization incorporates flaw remediation into the organizational configuration management process.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
SI-2	Flaw Remediation