STIGQter STIGQter: STIG Summary: Crunchy Data Postgres 16 Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 01 Jul 2026:

PostgreSQL products must be a version supported by the vendor.

DISA Rule

SV-283674r1193281_rule

Vulnerability Number

V-283674

Group Title

SRG-APP-001035-DB-000323

Rule Version

CD16-00-009300

Severity

CAT I

CCI(s)

Weight

10

Fix Recommendation

Upgrade or install a version of the product supported by the vendor.

Check Contents

If new packages are available for PostgreSQL, they can be reviewed in the package manager appropriate for the server operating system:

To list the version of installed PostgreSQL using psql:

$ sudo su - postgres
$ psql --version

To list the current version of software for RPM:

$ rpm -qa | grep postgres

To list the current version of software for APT:

$ apt-cache policy postgres

All versions of PostgreSQL are listed here: http://www.postgresql.org/support/versioning/

All security-relevant software updates for PostgreSQL are listed here: http://www.postgresql.org/support/security/

If PostgreSQL is not at the latest version, this is a finding.

Vulnerability Number

V-283674

Documentable

False

Rule Version

CD16-00-009300

Severity Override Guidance

If new packages are available for PostgreSQL, they can be reviewed in the package manager appropriate for the server operating system:

To list the version of installed PostgreSQL using psql:

$ sudo su - postgres
$ psql --version

To list the current version of software for RPM:

$ rpm -qa | grep postgres

To list the current version of software for APT:

$ apt-cache policy postgres

All versions of PostgreSQL are listed here: http://www.postgresql.org/support/versioning/

All security-relevant software updates for PostgreSQL are listed here: http://www.postgresql.org/support/security/

If PostgreSQL is not at the latest version, this is a finding.

Check Content Reference

M

Target Key

5598