# Security Compliance via CVE

**URL:** <https://forums.rockylinux.org/t/security-compliance-via-cve/4186>\
**Category:** Rocky Linux Help & Support\
**Created:** [October 1, 2021, 3:27am UTC](https://forums.rockylinux.org/t/security-compliance-via-cve/4186 "2021-10-01T03:27:39Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![sossomon](https://avatars.discourse-cdn.com/v4/letter/s/c2a13f/32.png) [@sossomon](https://forums.rockylinux.org/u/sossomon)\
**Post date:** [October 1, 2021, 3:27am UTC](https://forums.rockylinux.org/t/security-compliance-via-cve/4186/1 "2021-10-01T03:27:39Z")

</div>

Hi Everyone,

Love what is happening here, but I am curious what the on-going CVE notifications are going to look like. While I can probably figure out a way to download and parse the errata it currently doesn’t look like it will provide me with what new/hasn’t been patched CVEs have come out.

Is there a current “preferred” method for this that I can use to show security conscious people that this is the correct distro to move to before CentOS goes EOL at end of year?

---

<div class="post-metadata">

**Author:** ![jlehtone](https://avatars.discourse-cdn.com/v4/letter/j/e9a140/32.png) [@jlehtone](https://forums.rockylinux.org/u/jlehtone)\
**Post date:** [October 1, 2021, 7:42am UTC](https://forums.rockylinux.org/t/security-compliance-via-cve/4186/2 "2021-10-01T07:42:03Z")

</div>

I thought that CentOS has _no_ notifications? You just run ‘update’ regularly.  
If baseline has been “nothing” and that has been sufficient, …

Is data in this correct? [EL8 Distro Comparison | AlmaLinux Wiki](https://wiki.almalinux.org/Comparison.html)

---

<div class="post-metadata">

**Author:** ![neil](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/neil/32/34_2.png) [@neil](https://forums.rockylinux.org/u/neil)\
**Post date:** [October 1, 2021, 5:39pm UTC](https://forums.rockylinux.org/t/security-compliance-via-cve/4186/3 "2021-10-01T17:39:25Z")

</div>

Hi all,

Rocky Linux offers errata for updates which are built as soon as they are available upstream. The errata information can be found at [https://errata.rockylinux.org/](https://errata.rockylinux.org/). All features such as `dnf update --security`, `dnf updateinfo --security`, and others relating to advisories, CVEs, and other Errata-specific flags and features for DNF should work.

Please let me know if you have any questions about this! I’m going to open a PR for that Almalinux page to fix up the comparison, as we do in fact have the errata information… and we should probably make a dedicated post about it and how to use it!

---

<div class="post-metadata">

**Author:** ![brian](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/brian/32/5777_2.png) [@brian](https://forums.rockylinux.org/u/brian)\
**Post date:** [August 25, 2023, 4:04am UTC](https://forums.rockylinux.org/t/security-compliance-via-cve/4186/4 "2023-08-25T04:04:43Z")

</div>