Check: SLES-12-010000
SLES 12 STIG:
SLES-12-010000
(in versions v3 r2 through v1 r3)
Title
The SUSE operating system must be a vendor-supported release. (Cat I impact)
Discussion
A SUSE operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.
Check Content
Verify the SUSE operating system is a vendor-supported release. Use the following command to verify the SUSE operating system is a vendor-supported release: # cat /etc/os-release NAME="SLES" VERSION="12" Current End of Life for SLES 12 General Support is 31 Oct 2024 and Long-term Support is until 31 Oct 2027. If the release is not supported by the vendor, this is a finding.
Fix Text
Upgrade the SUSE operating system to a version supported by the vendor. If the system is not registered with the SUSE Customer Center, register the system against the correct subscription. If the system requires Long-Term Service Pack Support (LTSS), obtain the correct LTSS subscription for the system.
Additional Identifiers
Rule ID: SV-217101r991589_rule
Vulnerability ID: V-217101
Group Title: SRG-OS-000480-GPOS-00227
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-001230 |
Incorporate flaw remediation into the organizational configuration management process. |
Controls
Number | Title |
---|---|
SI-2 |
Flaw Remediation |