The latest Security Compliance Management (SCM) 3.9.0 has new supported platforms, improvements for air-gapped environments, benchmark updates, feature improvements, and security updates to address vulnerabilities.
Highlights
- Expanded platform support: SCM 3.9.0 now supports Ubuntu 24.04, Red Hat Enterprise Linux (RHEL) 10, and Puppet 9
-
Private image registry support:
complyadmcan now pull SCM container images from a private image registry to better support air-gapped and private-registry environments. - IP-based access restrictions: Keycloak Administration Console and Admin REST APIs can now be access restricted to IP addresses defined in the frontdoor allowlist.
- Expanded benchmarks: CIS-CAT Pro Assessor was updated to 4.65.0, expanded benchmark support for AlmaLinux and MacOS, and updated coverage on Microsoft Windows.
- 119 security vulnerabilities addressed via updates and fixes, along with several other security hardening fixes.
Below are some other summary details, but you may want to jump straight into the full release notes right away!
CIS-CAT Pro Assessor Updates
Along with updating to CIS-CAT Pro Assessor 4.65.0, the following benchmarks were added:
- AlmaLinux OS 9 STIG v1.0.0
- Apple macOS 15 (Sequoia) STIG v1.1.0
- Apple macOS 26 Tahoe STIG v1.0.0
These supported benchmarks were also updated:
- Microsoft Windows 11 Enterprise Benchmark v5.1.0
- Microsoft Windows Server 2022 Benchmark v5.1.0
- Microsoft Windows Server 2025 Benchmark v2.1.0
Operational Improvements and Security updates
There were several changes made to improve behavior and address vulnerabilities in this release, including addressing 119 security reports.
A few notable changes:
- SCM handles interrupted scheduled scans after reboots more reliably.
- Default benchmark selection is now more reliable when multiple non-STIG benchmarks are available.
- Hasura GraphQL field suggestions are now disabled to prevent schema enumeration.
See the full list in the release notes!
Why Upgrade?
For customers running Ubuntu 24.04, RHEL 10, Puppet 9, private registries, or security-sensitive environments, SCM 3.9.0 delivers meaningful operational, platform, and security improvements. Combined with expanded benchmark coverage and enhanced upgrade behavior, this release helps organizations maintain compliance with greater confidence and less administrative overhead.
🤖 AI Disclosure
This summary was initially drafted by AI and deterministic automation to pull together release notes information from the latest Security Compliance Management 3.9.0 release notes. The draft was then human edited, rewritten, and reviewed before publishing.
