Cis Ubuntu1404 V210 1 8

---
name: "CIS Ubuntu 14.04 LTS - 1.8 Ensure updates, patches, and additional security software are installed"
description: "Verify that all available updates, patches, and security software are installed on the system"
category: "cis-os-hardening"
version: "2.1.0"
author: "cyberstrike-official"
tags:
  - cis
  - ubuntu
  - ubuntu-14.04
  - level-1
  - not-scored
  - software-updates
cis_id: "1.8"
cis_benchmark: "CIS Ubuntu Linux 14.04 LTS Benchmark v2.1.0"
tech_stack:
  - ubuntu
  - linux
cwe_ids: []
chains_with: []
prerequisites: []
severity_boost: "high"
---

# 1.8 Ensure updates, patches, and additional security software are installed (Not Scored)

## Profile Applicability

- Level 1 - Server
- Level 1 - Workstation

## Description

Periodically patches are released for included software either due to security flaws or to include additional functionality.

## Rationale

Newer patches may contain security enhancements that would not be available through the latest full update. As a result, it is recommended that the latest software patches be used to take advantage of the latest functionality. As with any software installation, organizations need to determine if a given update meets their requirements and verify the compatibility and supportability of any additional software against the update revision that is selected.

## Audit Procedure

Run the following command and verify there are no updates or patches to install:

```bash
apt-get -s upgrade
```

## Expected Result

The output should indicate that there are no packages to upgrade (0 upgraded, 0 newly installed, 0 to remove).

## Remediation

Use your package manager to update all packages on the system according to site policy.

## Default Value

Not applicable.

## Notes

Site policy may mandate a testing period before install onto production systems for available updates.

## References

- CIS Controls: 4.5 Use Automated Patch Management And Software Update Tools

## Profile

- Level 1 - Server
- Level 1 - Workstation