Detections
Analytics
SLEM-05-214020 - SLEM 5 must remove all outdated software components after updated versions have been installed.
Information
Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by adversaries. Some information technology products may remove older versions of software automatically from the information system.Solution
Configure SLEM 5 to remove all outdated software components after an update.Add or modify the following line in the "/etc/zypp/zypp.conf" file:
solver.upgradeRemoveDroppedPackages = true
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SLEM_5_V1R4_STIG.zip
Item Details
Category: SYSTEM AND INFORMATION INTEGRITY
References: 800-53|SI-2(6), CAT|II, CCI|CCI-002617, Rule-ID|SV-261275r996314_rule, STIG-ID|SLEM-05-214020, Vuln-ID|V-261275
Plugin: Unix
Control ID: 4039e28ea770fa0b173093dc3af31d6a132a844eec74e05b985cf5a7a7c9880d