====== 1.8 Ensure updates, patches, and additional security software are installed (Not Scored) ======
=====Profile Applicability=====
Level 1 - Server
Level 1 - Workstation
=====Description=====
Periodically patches are released for included software either due to security flaws or to include additional functionality.
=====Rationale=====
Newer patches may contain security enhancements that would not be available through the latest full update. As a result, it is recommended that the latest software patches be used to take advantage of the latest functionality. As with any software installation, organizations need to determine if a given update meets their requirements and verify the compatibility and supportability of any additional software against the update revision that is selected.
=====Audit=====
Run the following command and verify there are no updates or patches to install:
# apt-get -s upgrade
=====Remediation=====
Use your package manager to update all packages on the system according to site policy.
=====Notes=====
Site policy may mandate a testing period before install onto production systems for available updates.