BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

SI-02(06) Removal of Previous Versions of Software and Firmware

NIST SP 800-53 (controls) 5.1.1+u4
All changes in this version
first version loaded SI part of SI-2

Title

Removal of Previous Versions of Software and Firmware

Control

Remove previous versions of [Assignment: software and firmware components] after updated versions have been installed.

Discussion

Previous versions of software or firmware components that are not removed from the system after updates have been installed may be exploited by adversaries. Some products may automatically remove previous versions of software and firmware from the system.

Parameters

si-02.06_odp: software and firmware components

Assessment objective

SI-02(06) previous versions of [Assignment: software and firmware components] are removed after updated versions have been installed.

STIG rules that implement this control 5

Application Security and Development V6R5

Canonical Ubuntu 22.04 LTS V2R10

Canonical Ubuntu 24.04 LTS V1R7

Red Hat Enterprise Linux 10 V1R3

Red Hat Enterprise Linux 9 V2R10