STIGQter STIGQter: STIG Summary: MariaDB Enterprise 10.x Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Apr 2026:

Security-relevant software updates to MariaDB must be installed within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).

DISA Rule

SV-253745r1137667_rule

Vulnerability Number

V-253745

Group Title

SRG-APP-000456-DB-000390

Rule Version

MADB-10-009300

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Institute and adhere to policies and procedures to ensure that patches are consistently applied to MariaDB within the time allowed.

Check Contents

If new packages are available for MariaDB, they can be reviewed in the package manager appropriate for the server operating system.

To list the version of installed MariaDB, run the following Linux commands as the system administrator:

MariaDB> SELECT @@version;

Check the list of installed packages:
$ sudo yum list installed | grep -i mariadb

All versions of MariaDB will be listed on:
https://mariadb.com/downloads/#mariadb_platform-mariadb_server

All security-relevant software updates for MariaDB will be listed on:

https://mariadb.com/kb/en/library/security/

If MariaDB is not at the latest version, this is a finding.

If MariaDB is not at the latest version and the evaluated version has CVEs (IAVAs), this is a CAT I finding.

Vulnerability Number

V-253745

Documentable

False

Rule Version

MADB-10-009300

Severity Override Guidance

If new packages are available for MariaDB, they can be reviewed in the package manager appropriate for the server operating system.

To list the version of installed MariaDB, run the following Linux commands as the system administrator:

MariaDB> SELECT @@version;

Check the list of installed packages:
$ sudo yum list installed | grep -i mariadb

All versions of MariaDB will be listed on:
https://mariadb.com/downloads/#mariadb_platform-mariadb_server

All security-relevant software updates for MariaDB will be listed on:

https://mariadb.com/kb/en/library/security/

If MariaDB is not at the latest version, this is a finding.

If MariaDB is not at the latest version and the evaluated version has CVEs (IAVAs), this is a CAT I finding.

Check Content Reference

M

Target Key

5475