STIGQter: STIG Summary: MariaDB Enterprise 10.x Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Apr 2026:

When updates are applied to the MariaDB software, any software components that have been replaced or made unnecessary must be removed.

DISA Rule

SV-253744r961677_rule

Vulnerability Number

V-253744

Group Title

SRG-APP-000454-DB-000389

Rule Version

MADB-10-009200

Severity

CAT II

CCI(s)

• CCI-002617 - Remove previous versions of organization-defined software components after updated versions have been installed.

Weight

10

Fix Recommendation

If after the upgrade outdated packages remain, update them if needed or remove. Example:

$ sudo yum remove package_name

Check Contents

If updating through a repository using yum, apt, etc., all MariaDB packages should be updated/upgraded at the same time.

Use the package manager to verify no outdated packages remain. Example:

$ sudo yum list installed | grep -i mariadb

If older packages remain, this is a finding.

Vulnerability Number

V-253744

Documentable

False

Rule Version

MADB-10-009200

Severity Override Guidance

If updating through a repository using yum, apt, etc., all MariaDB packages should be updated/upgraded at the same time.

Use the package manager to verify no outdated packages remain. Example:

$ sudo yum list installed | grep -i mariadb

If older packages remain, this is a finding.

Check Content Reference

M

Target Key

5475