← Back to Canonical Ubuntu 18.04 LTS Security Technical Implementation Guide

V-264388

CAT I (High)

The Ubuntu operating system must be a vendor supported release.

Rule ID

SV-264388r991589_rule

STIG

Canonical Ubuntu 18.04 LTS Security Technical Implementation Guide

Version

V2R15

CCIs

CCI-000366

Discussion

An Ubuntu operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.

Check Content

Verify the version of the Ubuntu operating system is vendor supported.

Check the version of the Ubuntu operating system with the following command:

# cat /etc/lsb-release

DISTRIB_RELEASE=18.04
DISTRIB_CODENAME=bionic
DISTRIB_DESCRIPTION="Ubuntu 18.04.1 LTS"

Validate that "Extended Security Maintenance" support has been purchased from the vendor.
If the operating system does not have a documented "Extended Security Maintenance" agreement in place, this is a finding.

Fix Text

Upgrade to a supported version of the Ubuntu operating system.