Revision History for Oracle Linux STIG Images
Oracle updates the Oracle Linux STIG Image regularly to address security issues.
If you are deploying an older Oracle Linux STIG Image, you might want to perform a subsequent scan to check for regular, quarterly DISA STIG updates. See Rescanning an Instance for Compliance for more information. Concept topic template
Oracle Linux 8
- Oracle Linux-8.10-2024.08.20-STIG (for x86_64)
- Oracle Linux-8.10-aarch64-2024.08.20-STIG (for aarch64)
- Image Information
-
- kernel-uek: 5.15.0-209.161.7.1.el8uek
- First release of Oracle Linux 8.10 hardened against DISA STIG for Oracle Linux 8 Ver 1, Rel 10.
- Updated system packages to the latest versions that are available, with security fixes.
- Additional STIG rule remediations applied to the image, see the Using the Checklist to View Additional Configurations.
- Checklist files in
/usr/share/xml/stig:OL8_SSG_STIG_V1R10_CHECKLIST_RELEASE.cklOL8_DISA_BENCHMARK_V1R8_CHECKLIST_RELEASE.ckl
- Compliance Information
-
Target: SSG "stig" profile aligned with DISA STIG for Oracle Linux 8 Ver 1, Rel 10
- Checklist Compliance Score for x86_64: 74.63%
- Checklist Compliance Score for aarch64: 74.55%
Target: DISA STIG for Oracle Linux 8 Ver 1, Rel 8 Benchmark profile
- Checklist Compliance Score for x86_64: 80.57%
- Checklist Compliance Score for aarch64: 80.57%
The higher compliance scores for the DISA STIG Benchmark reflect a more limited scope of rules compared to the complete DISA STIG. However, the SSG "stig" profile accounts for the full DISA STIG, providing a more comprehensive evaluation of the image's compliance.
- Oracle Linux-8.9-2024.01.25-STIG (for x86_64)
- Oracle Linux-8.9-aarch64-2024.01.25-STIG (for aarch64)
- Image Information
-
- kernel-uek: 5.15.0-202.135.2.el8uek
- First release of Oracle Linux 8.9 hardened against DISA STIG for Oracle Linux 8 Ver 1, Rel 8.
- Updated system packages to the latest versions that are available, with security fixes.
- Additional STIG rule remediations applied to the image, see the Using the Checklist to View Additional Configurations.
- Checklist files in
/usr/share/xml/stig:OL8_SSG_STIG_V1R8_CHECKLIST_RELEASE.cklOL8_DISA_BENCHMARK_V1R7_CHECKLIST_RELEASE.ckl
- Compliance Information
-
Target: SSG "stig" profile aligned with DISA STIG for Oracle Linux 8 Ver 1, Rel 8
- Checklist Compliance Score for x86_64: 67.50%
- Checklist Compliance Score for aarch64: 67.40%
Target: DISA STIG for Oracle Linux 8 Ver 1, Rel 7 Benchmark profile
- Checklist Compliance Score for x86_64: 78.92%
- Checklist Compliance Score for aarch64: 78.92%
The higher compliance scores for the DISA STIG Benchmark reflect a more limited scope of rules compared to the complete DISA STIG. However, the SSG "stig" profile accounts for the full DISA STIG, providing a more comprehensive evaluation of the image's compliance.
- Oracle Linux-8.8-2023.07.06-STIG (for x86_64)
- Oracle Linux-8.8-aarch64-2023.07.06-STIG (for aarch64)
- Image Information
-
- kernel-uek: 5.15.0-102.110.5.1.el8uek
- First release of Oracle Linux 8.8 hardened against DISA STIG for Oracle Linux 8 Ver 1, Rel 6.
- Updated system packages to the latest versions that are available, with security fixes.
- Additional STIG rule remediations applied to the image, see the Using the Checklist to View Additional Configurations.
- Checklist files in
/usr/share/xml/stig:OL8_SSG_STIG_V1R6_CHECKLIST_RELEASE.cklOL8_DISA_BENCHMARK_V1R5_CHECKLIST_RELEASE.ckl
- Compliance Information
-
Target: SSG "stig" profile aligned with DISA STIG for Oracle Linux 8 Ver 1, Rel 6
- Checklist Compliance Score for x86_64: 64.81%
- Checklist Compliance Score for aarch64: 64.54%
Target: DISA STIG for Oracle Linux 8 Ver 1, Rel 5 Benchmark profile
- Checklist Compliance Score for x86_64: 78.92%
- Checklist Compliance Score for aarch64: 78.92%
The higher compliance scores for the DISA STIG Benchmark reflect a more limited scope of rules compared to the complete DISA STIG. However, the SSG "stig" profile accounts for the full DISA STIG, providing a more comprehensive evaluation of the image's compliance.
- Oracle Linux-8.7-2023.04.26-STIG (for x86_64)
- Oracle Linux-8.7-aarch64-2023.04.26-STIG (for aarch64)
- Image Information
-
- kernel-uek: 5.15.0-100.96.32.el8uek
- First release of Oracle Linux 8.7 hardened against DISA STIG for Oracle Linux 8 Ver 1, Rel 5.
- Updated system packages to the latest versions that are available, with security fixes.
- Additional STIG rule remediations applied to the image, see the Using the Checklist to View Additional Configurations.
- Checklist files in
/usr/share/xml/stig:OL8_SSG_STIG_V1R5_CHECKLIST_RELEASE.cklOL8_DISA_BENCHMARK_V1R4_CHECKLIST_RELEASE.ckl
- Compliance Information
-
Target: SSG "stig" profile aligned with DISA STIG for Oracle Linux 8 Ver 1, Rel 5
- Checklist Compliance Score for x86_64: 63.78%
- Checklist Compliance Score for aarch64: 63.50%
Target: DISA STIG for Oracle Linux 8 Ver 1, Rel 4 Benchmark profile
- Checklist Compliance Score for x86_64: 79.25%
- Checklist Compliance Score for aarch64: 79.25%
The higher compliance scores for the DISA STIG Benchmark reflect a more limited scope of rules compared to the complete DISA STIG. However, the SSG "stig" profile accounts for the full DISA STIG, providing a more comprehensive evaluation of the image's compliance.
Oracle Linux 7 (extended support)
This information is for:
- Oracle Linux-7.9-2025.02.06-STIG (for x86_64)
- Oracle Linux-7.9-aarch64-2025.02.06-STIG (for aarch64)
- Image Information
-
- kernel-uek: 5.4.17-2136.339.5.1.el7uek (x86_64) and 5.4.17-2136.338.4.2 (aarch64)
- Updated system packages to the latest versions that are available, with security fixes.
- Extended Linux Support (ELS) yum channels, or repositories, added to the x86_64 image.
- Compliance target is the SSG profile aligned with DISA STIG for Oracle Linux 7 Ver 3, Rel 1.
- Minimum SSG version: scap-security-guide-0.1.73-1.0.3
- Additional STIG rule remediations applied to the image, see the Using the Checklist to View Additional Configurations.
- Checklist files in
/usr/share/xml/stig:OL7_SSG_STIG_V3R1_CHECKLIST_RELEASE.cklOL7_DISA_BENCHMARK_V3R1_CHECKLIST_RELEASE.ckl
- Compliance Information
-
Target: SSG "stig" profile aligned with DISA STIG for Oracle Linux 7 Ver 3, Rel 1
- Checklist Compliance Score x86_64: 81.65%
- Checklist Compliance Score aarch64: 81.65%
Target: DISA STIG for Oracle Linux 7 Ver 3, Rel 1 Benchmark profile
- Checklist Compliance Score x86_64: 91.71%
- Checklist Compliance Score aarch64: 91.71%
Note
The STIG standard from DISA had no significant changes, other than wording, between Oracle Linux 7 Ver 3, Rel 1 and Oracle Linux 7 Ver 2, Rel 14. Because of this, any system compliant with Oracle Linux 7 Ver 2, Rel 14 is also compliant with Oracle Linux 7 Ver 3, Rel 1.
The STIG standard from DISA had no significant changes, other than wording, between Oracle Linux 7 Ver 3, Rel 1 and Oracle Linux 7 Ver 2, Rel 14. Because of this, any system compliant with Oracle Linux 7 Ver 2, Rel 14 is also compliant with Oracle Linux 7 Ver 3, Rel 1.
The higher compliance scores for the DISA STIG Benchmark reflect a more limited scope of rules compared to the complete DISA STIG. However, the SSG "stig" profile accounts for the full DISA STIG, providing a more comprehensive evaluation of the image's compliance.
This information is for:
- Oracle Linux-7.9-2024.05.31-STIG (for x86_64)
- Oracle Linux-7.9-aarch64-2024.05.31-STIG (for aarch64)
- Image Information
-
- kernel-uek: 5.4.17-2136.331.7.el7uek
- Updated system packages to the latest versions that are available, with security fixes.
- Compliance target is the SSG profile aligned with DISA STIG for Oracle Linux 7 Ver 2, Rel 14.
- Minimum SSG version: scap-security-guide-0.1.72-2.0.1
- Additional STIG rule remediations applied to the image, see the Using the Checklist to View Additional Configurations.
- Checklist files in
/usr/share/xml/stig:OL7_SSG_STIG_V2R14_CHECKLIST_RELEASE.cklOL7_DISA_BENCHMARK_V1R14_CHECKLIST_RELEASE.ckl
- Compliance Information
-
Target: SSG "stig" profile aligned with DISA STIG for Oracle Linux 7 Ver 2, Rel 14
- Checklist Compliance Score x86_64: 81.36%
- Checklist Compliance Score aarch64: 81.36%
Target: DISA STIG for Oracle Linux 7 Ver 2, Rel 14 Benchmark profile
- Checklist Compliance Score x86_64: 91.77%
- Checklist Compliance Score aarch64: 91.77%
Note
The STIG standard from DISA had no significant changes, other than wording, between Oracle Linux 7 Ver 2, Rel 13 and Oracle Linux 7 Ver 2, Rel 14. Because of this, any system compliant with Oracle Linux 7 Ver 2, Rel 13 is also compliant with Oracle Linux 7 Ver 2, Rel 14.
The STIG standard from DISA had no significant changes, other than wording, between Oracle Linux 7 Ver 2, Rel 13 and Oracle Linux 7 Ver 2, Rel 14. Because of this, any system compliant with Oracle Linux 7 Ver 2, Rel 13 is also compliant with Oracle Linux 7 Ver 2, Rel 14.
The higher compliance scores for the DISA STIG Benchmark reflect a more limited scope of rules compared to the complete DISA STIG. However, the SSG "stig" profile accounts for the full DISA STIG, providing a more comprehensive evaluation of the image's compliance.
This information is for:
- Oracle Linux-7.9-2023.11.30-STIG (for x86_64)
- Oracle Linux-7.9-aarch64-2023.11.30-STIG (for aarch64)
- Image Information
-
- kernel-uek: 5.4.17-2136.325.5.1.el7uek
- Updated system packages to the latest versions that are available, with security fixes.
- Compliance target is the SSG profile aligned with DISA STIG for Oracle Linux 7 Ver 2, Rel 13.
- Minimum SSG version: scap-security-guide-0.1.69-1.0.1
- Additional STIG rule remediations applied to the image, see the Using the Checklist to View Additional Configurations.
- Checklist files in
/usr/share/xml/stig:OL7_SSG_STIG_V2R13_CHECKLIST_RELEASE.cklOL7_DISA_BENCHMARK_V1R13_CHECKLIST_RELEASE.ckl
- Compliance Information
-
Target: SSG "stig" profile aligned with DISA STIG for Oracle Linux 7 Ver 2, Rel 13
- Checklist Compliance Score x86_64: 81.36%
- Checklist Compliance Score aarch64: 81.36%
Target: DISA STIG for Oracle Linux 7 Ver 2, Rel 13 Benchmark profile
- Checklist Compliance Score x86_64: 91.71%
- Checklist Compliance Score aarch64: 91.71%
Note
The STIG standard from DISA had no significant changes, other than wording, between Oracle Linux 7 Ver 2, Rel 12 and Oracle Linux 7 Ver 2, Rel 13. Because of this, any system compliant with Oracle Linux 7 Ver 2, Rel 12 is also compliant with Oracle Linux 7 Ver 2, Rel 13.
The higher compliance scores for the DISA STIG Benchmark reflect a more limited scope of rules compared to the complete DISA STIG. However, the SSG "stig" profile accounts for the full DISA STIG, providing a more comprehensive evaluation of the image's compliance.
This information is for:
- Oracle Linux-7.9-2023.05.31-STIG (for x86_64)
- Oracle Linux-7.9-aarch64-2023.05.31-STIG (for aarch64)
- Image Information
-
- kernel-uek: 5.4.17-2136.319.1.3.el7uek
- Updated system packages to the latest versions that are available, with security fixes.
- Compliance target transitioned to the SSG profile aligned with DISA STIG for Oracle Linux 7 Ver 2, Rel 11.
- Additional STIG rule remediations applied to the image, see the Using the Checklist to View Additional Configurations.
- Checklist files in
/usr/share/xml/stig:OL7_SSG_STIG_V2R11_CHECKLIST_RELEASE.cklOL7_DISA_BENCHMARK_V1R11_CHECKLIST_RELEASE.ckl
- Compliance Information
-
Target: SSG "stig" profile aligned with DISA STIG for Oracle Linux 7 Ver 2, Rel 11
- Checklist Compliance Score x86_64: 81.36%
- Checklist Compliance Score aarch64: 81.36%
Target: DISA STIG for Oracle Linux 7 Ver 2, Rel 11 Benchmark profile
- Checklist Compliance Score x86_64: 91.71%
- Checklist Compliance Score aarch64: 91.71%
The higher compliance scores for the DISA STIG Benchmark reflect a more limited scope of rules compared to the complete DISA STIG. However, the SSG "stig" profile accounts for the full DISA STIG, providing a more comprehensive evaluation of the image's compliance.