**Objective:** Prevent exploitation of known exploitable vulnerability
@@ -2070,7 +2070,7 @@ Verify that:
1. Description of how to scan for the vulnerability
1. Log of vulnerability scan results
### 6.5.2 SU_UPDATE-2
### 6.5.2 SU_UPDATES-2
**Objective:** Responsibility of OS level upgrades can be elsewhere outside of the system control.
@@ -2089,7 +2089,7 @@ Verify that:
1. References to documentation sections.
### 6.5.3 SU_UPDATE-3
### 6.5.3 SU_UPDATES-3
**Objective:**
@@ -2116,7 +2116,7 @@ Verify that:
* References to document sections.
* Screenshots from the update configurations and of the corresponding conducts.
### 6.5.4 SU_UPDATE-4
### 6.5.4 SU_UPDATES-4
**Objective:** Update packages are not altered.
@@ -2141,7 +2141,7 @@ Verify that:
* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;
* Logs, configuration files, or audit traces demonstrating the implementation of the requirement.
### 6.5.5 SU_UPDATE-5
### 6.5.5 SU_UPDATES-5
**Objective:** Prevent accidental installation of older packages.
@@ -2165,7 +2165,7 @@ Verify that:
* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;
* Logs, configuration files, or audit traces demonstrating the implementation of the requirement.
### 6.5.6 SU_UPDATE-6
### 6.5.6 SU_UPDATES-6
**Objective:** Reduce the outages due to failed update.
@@ -2192,7 +2192,7 @@ Verify that:
* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;
* Logs, configuration files, or audit traces demonstrating the implementation of the requirement.
### 6.5.7 SU_UPDATE-7
### 6.5.7 SU_UPDATES-7
**Objective:** Protect the high availability of the system in peak usage hours and prevent of installation of updates that are known to break services.
@@ -2217,7 +2217,7 @@ Verify that:
* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;
* Logs, configuration files, or audit traces demonstrating the implementation of the requirement.
### 6.5.8 SU_UPDATE-8
### 6.5.8 SU_UPDATES-8
**Objective:** Rollback operations are auditable.
@@ -2244,7 +2244,7 @@ Verify that:
* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;
* Logs, configuration files, or audit traces demonstrating the implementation of the requirement.
### 6.5.9 SU_UPDATE-9
### 6.5.9 SU_UPDATES-9
**Objective:** Protect the availability of the product.
@@ -2270,7 +2270,7 @@ Verify that:
* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;
* Logs, configuration files, or audit traces demonstrating the implementation of the requirement.
### 6.5.10 SU_UPDATE-10
### 6.5.10 SU_UPDATES-10
**Objective:** Product user have knowledge about the possibility to update.
@@ -2295,7 +2295,7 @@ Verify that:
* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;
* Logs, configuration files, or audit traces demonstrating the implementation of the requirement.
### 6.5.11 SU_UPDATE-11
### 6.5.11 SU_UPDATES-11
**Objective:** Product user has an understatement of what versions are installed.
@@ -2321,7 +2321,7 @@ Verify that:
* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;
* Logs, configuration files, or audit traces demonstrating the implementation of the requirement.
### 6.5.12 SU_UPDATE-12
### 6.5.12 SU_UPDATES-12
**Objective:** Product user understand the status of the system.
@@ -2347,7 +2347,7 @@ Verify that:
* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;
* Logs, configuration files, or audit traces demonstrating the implementation of the requirement.
### 6.5.13 SU_UPDATE-13
### 6.5.13 SU_UPDATES-13
**Objective:** Ensure the latest fixes are applied to the product.
@@ -2375,7 +2375,7 @@ Verify that:
* Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;
* Logs, configuration files, or audit traces demonstrating the implementation of the requirement.