highsystemverified ✓

Ensure the operating system is a vendor-supported release

os-vendor-supported-release · UBUNTU ≥ 22 · 1 impl

Description

The installed Ubuntu release must be a version that is still supported by the vendor (a current LTS release within its support window), so that it continues to receive security updates.

Rationale

Operating system releases that are past end of life no longer receive vendor security patches, leaving known vulnerabilities permanently unaddressed. Only vendor-supported releases can be kept current.

Check → Remediate

Checkcommand

# Currently vendor-supported Ubuntu LTS releases. Update this list as
# releases reach end of standard support.
. /etc/os-release 2>/dev/null
case "$VERSION_ID" in
  20.04|22.04|24.04|26.04)
    echo "OK: vendor-supported Ubuntu LTS ${VERSION_ID}"; exit 0 ;;
esac
echo "FAIL: Ubuntu ${VERSION_ID:-unknown} is not a currently vendor-supported LTS"; exit 1

expected_exit:: 0

Remediatemanual

note:: Upgrade to a vendor-supported Ubuntu LTS release and, where applicable, confirm subscription/support status with 'pro status'.

Framework references

STIG

V-278917 / UBTU-24-700400V-278951 / UBTU-22-211000

NIST 800-53

SA-22

Live verification

ubuntu22:checkubuntu24:check

#os-support#lifecycle#patching#stig