Oracle Cloud Infrastructure Documentation

Revision History for Oracle Linux STIG Images

Oracle updates the Oracle Linux STIG Image regularly to address security issues.

When deploying an older Oracle Linux STIG Image, perform a scan to check for regular, quarterly DISA STIG updates. See Rescanning an Instance for Compliance for more information.

Oracle Linux 8

Oracle-Linux-8.10-STIG June 2025
This information is for:
  • Oracle Linux-8.10-2025.06.24-STIG (for x86_64)
  • Oracle Linux-8.10-aarch64-2025.06.24-STIG (for aarch64)
Image Information
  • kernel-uek: 5.15.0-309.180.4.el8uek
  • scap-security-guide: 0.1.76-1.0.3.el8.noarch
  • First release of Oracle Linux 8.10 hardened against DISA STIG for Oracle Linux 8 Ver 2, Rel 4.
  • Updated system packages to the latest versions that are available, with security fixes.
  • Extra STIG rule remediations applied to the image, see the Using the Checklist to View More Configurations.
  • Checklist files in /usr/share/xml/stig:
    • OL8_SSG_STIG_V2R4_CHECKLIST_RELEASE.ckl
    • OL8_DISA_BENCHMARK_V2R4_CHECKLIST_RELEASE.ckl
Compliance Information

Target: SSG "stig" profile aligned with DISA STIG for Oracle Linux 8 Ver 2, Rel 4

  • Checklist Compliance Score for x86_64: 79.94%
  • Checklist Compliance Score for aarch64: 79.87%

Target: DISA STIG for Oracle Linux 8 Ver 2, Rel 4 Benchmark profile

  • Checklist Compliance Score for x86_64: 84.26%
  • Checklist Compliance Score for aarch64: 84.26%
Note

The larger compliance scores for the DISA STIG Benchmark reflect a more limited scope of rules compared to the complete DISA STIG. However, the SSG "stig" profile accounts for the full DISA STIG, providing a more comprehensive evaluation of the image's compliance.
Oracle-Linux-8.10-STIG September 2024
This information is for:
  • Oracle Linux-8.10-2024.08.20-STIG (for x86_64)
  • Oracle Linux-8.10-aarch64-2024.08.20-STIG (for aarch64)
Image Information
  • kernel-uek: 5.15.0-209.161.7.1.el8uek
  • First release of Oracle Linux 8.10 hardened against DISA STIG for Oracle Linux 8 Ver 1, Rel 10.
  • Updated system packages to the latest versions that are available, with security fixes.
  • Extra STIG rule remediations applied to the image, see the Using the Checklist to View More Configurations.
  • Checklist files in /usr/share/xml/stig:
    • OL8_SSG_STIG_V1R10_CHECKLIST_RELEASE.ckl
    • OL8_DISA_BENCHMARK_V1R8_CHECKLIST_RELEASE.ckl
Compliance Information

Target: SSG "stig" profile aligned with DISA STIG for Oracle Linux 8 Ver 1, Rel 10

  • Checklist Compliance Score for x86_64: 74.63%
  • Checklist Compliance Score for aarch64: 74.55%

Target: DISA STIG for Oracle Linux 8 Ver 1, Rel 8 Benchmark profile

  • Checklist Compliance Score for x86_64: 80.57%
  • Checklist Compliance Score for aarch64: 80.57%
Note

The larger compliance scores for the DISA STIG Benchmark reflect a more limited scope of rules compared to the complete DISA STIG. However, the SSG "stig" profile accounts for the full DISA STIG, providing a more comprehensive evaluation of the image's compliance.
Oracle-Linux-8.9-STIG January 2024
This information is for:
  • Oracle Linux-8.9-2024.01.25-STIG (for x86_64)
  • Oracle Linux-8.9-aarch64-2024.01.25-STIG (for aarch64)
Image Information
  • kernel-uek: 5.15.0-202.135.2.el8uek
  • First release of Oracle Linux 8.9 hardened against DISA STIG for Oracle Linux 8 Ver 1, Rel 8.
  • Updated system packages to the latest versions that are available, with security fixes.
  • Extra STIG rule remediations applied to the image, see the Using the Checklist to View More Configurations.
  • Checklist files in /usr/share/xml/stig:
    • OL8_SSG_STIG_V1R8_CHECKLIST_RELEASE.ckl
    • OL8_DISA_BENCHMARK_V1R7_CHECKLIST_RELEASE.ckl
Compliance Information

Target: SSG "stig" profile aligned with DISA STIG for Oracle Linux 8 Ver 1, Rel 8

  • Checklist Compliance Score for x86_64: 67.50%
  • Checklist Compliance Score for aarch64: 67.40%

Target: DISA STIG for Oracle Linux 8 Ver 1, Rel 7 Benchmark profile

  • Checklist Compliance Score for x86_64: 78.92%
  • Checklist Compliance Score for aarch64: 78.92%
Note

The larger compliance scores for the DISA STIG Benchmark reflect a more limited scope of rules compared to the complete DISA STIG. However, the SSG "stig" profile accounts for the full DISA STIG, providing a more comprehensive evaluation of the image's compliance.
Oracle-Linux-8.8-STIG July 2023
This information is for:
  • Oracle Linux-8.8-2023.07.06-STIG (for x86_64)
  • Oracle Linux-8.8-aarch64-2023.07.06-STIG (for aarch64)
Image Information
  • kernel-uek: 5.15.0-102.110.5.1.el8uek
  • First release of Oracle Linux 8.8 hardened against DISA STIG for Oracle Linux 8 Ver 1, Rel 6.
  • Updated system packages to the latest versions that are available, with security fixes.
  • Extra STIG rule remediations applied to the image, see the Using the Checklist to View More Configurations.
  • Checklist files in /usr/share/xml/stig:
    • OL8_SSG_STIG_V1R6_CHECKLIST_RELEASE.ckl
    • OL8_DISA_BENCHMARK_V1R5_CHECKLIST_RELEASE.ckl
Compliance Information

Target: SSG "stig" profile aligned with DISA STIG for Oracle Linux 8 Ver 1, Rel 6

  • Checklist Compliance Score for x86_64: 64.81%
  • Checklist Compliance Score for aarch64: 64.54%

Target: DISA STIG for Oracle Linux 8 Ver 1, Rel 5 Benchmark profile

  • Checklist Compliance Score for x86_64: 78.92%
  • Checklist Compliance Score for aarch64: 78.92%
Note

The larger compliance scores for the DISA STIG Benchmark reflect a more limited scope of rules compared to the complete DISA STIG. However, the SSG "stig" profile accounts for the full DISA STIG, providing a more comprehensive evaluation of the image's compliance.
Oracle-Linux-8.7-STIG April 2023
This information is for:
  • Oracle Linux-8.7-2023.04.26-STIG (for x86_64)
  • Oracle Linux-8.7-aarch64-2023.04.26-STIG (for aarch64)
Image Information
  • kernel-uek: 5.15.0-100.96.32.el8uek
  • First release of Oracle Linux 8.7 hardened against DISA STIG for Oracle Linux 8 Ver 1, Rel 5.
  • Updated system packages to the latest versions that are available, with security fixes.
  • Extra STIG rule remediations applied to the image, see the Using the Checklist to View More Configurations.
  • Checklist files in /usr/share/xml/stig:
    • OL8_SSG_STIG_V1R5_CHECKLIST_RELEASE.ckl
    • OL8_DISA_BENCHMARK_V1R4_CHECKLIST_RELEASE.ckl
Compliance Information

Target: SSG "stig" profile aligned with DISA STIG for Oracle Linux 8 Ver 1, Rel 5

  • Checklist Compliance Score for x86_64: 63.78%
  • Checklist Compliance Score for aarch64: 63.50%

Target: DISA STIG for Oracle Linux 8 Ver 1, Rel 4 Benchmark profile

  • Checklist Compliance Score for x86_64: 79.25%
  • Checklist Compliance Score for aarch64: 79.25%
Note

The larger compliance scores for the DISA STIG Benchmark reflect a more limited scope of rules compared to the complete DISA STIG. However, the SSG "stig" profile accounts for the full DISA STIG, providing a more comprehensive evaluation of the image's compliance.

Oracle Linux 7 (extended support)

Oracle-Linux-7.9-STIG February 2025

This information is for:

  • Oracle Linux-7.9-2025.02.06-STIG (for x86_64)
  • Oracle Linux-7.9-aarch64-2025.02.06-STIG (for aarch64)
Image Information
  • kernel-uek: 5.4.17-2136.339.5.1.el7uek (x86_64) and 5.4.17-2136.338.4.2 (aarch64)
  • Updated system packages to the latest versions that are available, with security fixes.
  • Extended Linux Support (ELS) yum channels, or repositories, added to the x86_64 image.
  • Compliance target is the SSG profile aligned with DISA STIG for Oracle Linux 7 Ver 3, Rel 1.
  • Minimum SSG version: scap-security-guide 0.1.73-1.0.3
  • Extra STIG rule remediations applied to the image, see the Using the Checklist to View More Configurations.
  • Checklist files in /usr/share/xml/stig:
    • OL7_SSG_STIG_V3R1_CHECKLIST_RELEASE.ckl
    • OL7_DISA_BENCHMARK_V3R1_CHECKLIST_RELEASE.ckl
Compliance Information

Target: SSG "stig" profile aligned with DISA STIG for Oracle Linux 7 Ver 3, Rel 1

  • Checklist Compliance Score x86_64: 81.65%
  • Checklist Compliance Score aarch64: 81.65%

Target: DISA STIG for Oracle Linux 7 Ver 3, Rel 1 Benchmark profile

  • Checklist Compliance Score x86_64: 91.71%
  • Checklist Compliance Score aarch64: 91.71%
Note

The STIG standard from DISA had no significant changes, other than wording, between Oracle Linux 7 Ver 3, Rel 1 and Oracle Linux 7 Ver 2, Rel 14. Because of this, any system compliant with Oracle Linux 7 Ver 2, Rel 14 is also compliant with Oracle Linux 7 Ver 3, Rel 1.
Note

The STIG standard from DISA had no significant changes, other than wording, between Oracle Linux 7 Ver 3, Rel 1 and Oracle Linux 7 Ver 2, Rel 14. Because of this, any system compliant with Oracle Linux 7 Ver 2, Rel 14 is also compliant with Oracle Linux 7 Ver 3, Rel 1.

Note

The larger compliance scores for the DISA STIG Benchmark reflect a more limited scope of rules compared to the complete DISA STIG. However, the SSG "stig" profile accounts for the full DISA STIG, providing a more comprehensive evaluation of the image's compliance.

Oracle-Linux-7.9-STIG May 2024

This information is for:

  • Oracle Linux-7.9-2024.05.31-STIG (for x86_64)
  • Oracle Linux-7.9-aarch64-2024.05.31-STIG (for aarch64)
Image Information
  • kernel-uek: 5.4.17-2136.331.7.el7uek
  • Updated system packages to the latest versions that are available, with security fixes.
  • Compliance target is the SSG profile aligned with DISA STIG for Oracle Linux 7 Ver 2, Rel 14.
  • Minimum SSG version: scap-security-guide 0.1.72-2.0.1
  • Extra STIG rule remediations applied to the image, see the Using the Checklist to View More Configurations.
  • Checklist files in /usr/share/xml/stig:
    • OL7_SSG_STIG_V2R14_CHECKLIST_RELEASE.ckl
    • OL7_DISA_BENCHMARK_V1R14_CHECKLIST_RELEASE.ckl
Compliance Information

Target: SSG "stig" profile aligned with DISA STIG for Oracle Linux 7 Ver 2, Rel 14

  • Checklist Compliance Score x86_64: 81.36%
  • Checklist Compliance Score aarch64: 81.36%

Target: DISA STIG for Oracle Linux 7 Ver 2, Rel 14 Benchmark profile

  • Checklist Compliance Score x86_64: 91.77%
  • Checklist Compliance Score aarch64: 91.77%
Note

The STIG standard from DISA had no significant changes, other than wording, between Oracle Linux 7 Ver 2, Rel 13 and Oracle Linux 7 Ver 2, Rel 14. Because of this, any system compliant with Oracle Linux 7 Ver 2, Rel 13 is also compliant with Oracle Linux 7 Ver 2, Rel 14.
Note

The STIG standard from DISA had no significant changes, other than wording, between Oracle Linux 7 Ver 2, Rel 13 and Oracle Linux 7 Ver 2, Rel 14. Because of this, any system compliant with Oracle Linux 7 Ver 2, Rel 13 is also compliant with Oracle Linux 7 Ver 2, Rel 14.

Note

The larger compliance scores for the DISA STIG Benchmark reflect a more limited scope of rules compared to the complete DISA STIG. However, the SSG "stig" profile accounts for the full DISA STIG, providing a more comprehensive evaluation of the image's compliance.

Oracle-Linux-7.9-STIG December 2023

This information is for:

  • Oracle Linux-7.9-2023.11.30-STIG (for x86_64)
  • Oracle Linux-7.9-aarch64-2023.11.30-STIG (for aarch64)
Image Information
  • kernel-uek: 5.4.17-2136.325.5.1.el7uek
  • Updated system packages to the latest versions that are available, with security fixes.
  • Compliance target is the SSG profile aligned with DISA STIG for Oracle Linux 7 Ver 2, Rel 13.
  • Minimum SSG version: scap-security-guide 0.1.69-1.0.1
  • Extra STIG rule remediations applied to the image, see the Using the Checklist to View More Configurations.
  • Checklist files in /usr/share/xml/stig:
    • OL7_SSG_STIG_V2R13_CHECKLIST_RELEASE.ckl
    • OL7_DISA_BENCHMARK_V1R13_CHECKLIST_RELEASE.ckl
Compliance Information

Target: SSG "stig" profile aligned with DISA STIG for Oracle Linux 7 Ver 2, Rel 13

  • Checklist Compliance Score x86_64: 81.36%
  • Checklist Compliance Score aarch64: 81.36%

Target: DISA STIG for Oracle Linux 7 Ver 2, Rel 13 Benchmark profile

  • Checklist Compliance Score x86_64: 91.71%
  • Checklist Compliance Score aarch64: 91.71%
Note

The STIG standard from DISA had no significant changes, other than wording, between Oracle Linux 7 Ver 2, Rel 12 and Oracle Linux 7 Ver 2, Rel 13. Because of this, any system compliant with Oracle Linux 7 Ver 2, Rel 12 is also compliant with Oracle Linux 7 Ver 2, Rel 13.
Note

The larger compliance scores for the DISA STIG Benchmark reflect a more limited scope of rules compared to the complete DISA STIG. However, the SSG "stig" profile accounts for the full DISA STIG, providing a more comprehensive evaluation of the image's compliance.

Oracle-Linux-7.9-STIG May 2023

This information is for:

  • Oracle Linux-7.9-2023.05.31-STIG (for x86_64)
  • Oracle Linux-7.9-aarch64-2023.05.31-STIG (for aarch64)
Image Information
  • kernel-uek: 5.4.17-2136.319.1.3.el7uek
  • Updated system packages to the latest versions that are available, with security fixes.
  • Compliance target transitioned to the SSG profile aligned with DISA STIG for Oracle Linux 7 Ver 2, Rel 11.
  • Extra STIG rule remediations applied to the image, see the Using the Checklist to View More Configurations.
  • Checklist files in /usr/share/xml/stig:
    • OL7_SSG_STIG_V2R11_CHECKLIST_RELEASE.ckl
    • OL7_DISA_BENCHMARK_V1R11_CHECKLIST_RELEASE.ckl
Compliance Information

Target: SSG "stig" profile aligned with DISA STIG for Oracle Linux 7 Ver 2, Rel 11

  • Checklist Compliance Score x86_64: 81.36%
  • Checklist Compliance Score aarch64: 81.36%

Target: DISA STIG for Oracle Linux 7 Ver 2, Rel 11 Benchmark profile

  • Checklist Compliance Score x86_64: 91.71%
  • Checklist Compliance Score aarch64: 91.71%
Note

The larger compliance scores for the DISA STIG Benchmark reflect a more limited scope of rules compared to the complete DISA STIG. However, the SSG "stig" profile accounts for the full DISA STIG, providing a more comprehensive evaluation of the image's compliance.