Detections
Analytics

1.190 AZLX-23-002615

Information

Amazon Linux 2023 must remove all software components after updated versions have been installed.

GROUP ID: V-274185RULE ID: SV-274185r1120543

Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by some adversaries.

Solution

Configure Amazon Linux 2023 to remove all software components after updated versions have been installed.

Set the "clean_requirements_on_remove" option to "1" in the "/etc/dnf/dnf.conf" file:

clean_requirements_on_remove=1

See Also

https://workbench.cisecurity.org/benchmarks/26107

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-2(6), CAT|II, CCI|CCI-002617, Rule-ID|SV-274185r1120543_rule, STIG-ID|AZLX-23-002615, Vuln-ID|V-274185

Plugin: Unix

Control ID: c339018da26af5424bec87e0f5080903d8ff4892402415108161c60f6b998b88