# Security patches release done when compared to RHEL updates

**URL:** <https://forums.rockylinux.org/t/security-patches-release-done-when-compared-to-rhel-updates/15558>\
**Category:** Rocky Linux Help & Support\
**Created:** [August 22, 2024, 7:22am UTC](https://forums.rockylinux.org/t/security-patches-release-done-when-compared-to-rhel-updates/15558 "2024-08-22T07:22:42Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yasmin](https://avatars.discourse-cdn.com/v4/letter/y/71c47a/32.png) [@Yasmin](https://forums.rockylinux.org/u/Yasmin)\
**Post date:** [August 22, 2024, 7:22am UTC](https://forums.rockylinux.org/t/security-patches-release-done-when-compared-to-rhel-updates/15558/1 "2024-08-22T07:22:43Z")

</div>

Hi There,

I am new to Rocky Linux, please could you let me know how fasts will be security patched will be done when compared to RHEL updates. I am looking for timelines.

---

<div class="post-metadata">

**Author:** ![label](https://avatars.discourse-cdn.com/v4/letter/l/c5a1d2/32.png) [@label](https://forums.rockylinux.org/u/label)\
**Post date:** [August 22, 2024, 7:24am UTC](https://forums.rockylinux.org/t/security-patches-release-done-when-compared-to-rhel-updates/15558/2 "2024-08-22T07:24:19Z")

</div>

This information can be found at our wiki in our [Version Policy](https://wiki.rockylinux.org/rocky/version/#general-update-timeline) section.

---

<div class="post-metadata">

**Author:** ![Yasmin](https://avatars.discourse-cdn.com/v4/letter/y/71c47a/32.png) [@Yasmin](https://forums.rockylinux.org/u/Yasmin)\
**Post date:** [August 22, 2024, 9:16am UTC](https://forums.rockylinux.org/t/security-patches-release-done-when-compared-to-rhel-updates/15558/3 "2024-08-22T09:16:31Z")

</div>

Hi,

Thank you and I have further other questions.

1. Is there commercial support for production and non production system from Rocky Linux community?
2. Also how are the jdk and tomcat version mapped, does that follow RHEL mapping?  
Regards  
Yasmin

---

<div class="post-metadata">

**Author:** ![label](https://avatars.discourse-cdn.com/v4/letter/l/c5a1d2/32.png) [@label](https://forums.rockylinux.org/u/label)\
**Post date:** [August 22, 2024, 9:33am UTC](https://forums.rockylinux.org/t/security-patches-release-done-when-compared-to-rhel-updates/15558/4 "2024-08-22T09:33:42Z")

</div>

> [@Yasmin](#):
>
> Is there commercial support for production and non production system from Rocky Linux community?

Only community support is available from the project. If you need commercial support, there are third party vendors you can reach out to.

> [@Yasmin](#):
>
> Also how are the jdk and tomcat version mapped, does that follow RHEL mapping?

Whatever is available in RHEL will be in Rocky Linux as we strive to be as close as possible, which does include the versions of our packages.

---

<div class="post-metadata">

**Author:** ![Yasmin](https://avatars.discourse-cdn.com/v4/letter/y/71c47a/32.png) [@Yasmin](https://forums.rockylinux.org/u/Yasmin)\
**Post date:** [August 22, 2024, 10:12am UTC](https://forums.rockylinux.org/t/security-patches-release-done-when-compared-to-rhel-updates/15558/5 "2024-08-22T10:12:44Z")

</div>

I tried to reach few third party companies but no reply from them.

---

<div class="post-metadata">

**Author:** ![gerry666uk](https://avatars.discourse-cdn.com/v4/letter/g/dbc845/32.png) [@gerry666uk](https://forums.rockylinux.org/u/gerry666uk)\
**Post date:** [August 22, 2024, 5:46pm UTC](https://forums.rockylinux.org/t/security-patches-release-done-when-compared-to-rhel-updates/15558/6 "2024-08-22T17:46:49Z")

</div>

If you want paid support, you could just use RHEL, but what kind of support do you expect to get?

---

<div class="post-metadata">

**Author:** ![Yasmin](https://avatars.discourse-cdn.com/v4/letter/y/71c47a/32.png) [@Yasmin](https://forums.rockylinux.org/u/Yasmin)\
**Post date:** [August 23, 2024, 4:18am UTC](https://forums.rockylinux.org/t/security-patches-release-done-when-compared-to-rhel-updates/15558/7 "2024-08-23T04:18:51Z")

</div>

Production support for OS and Security patches.

---

<div class="post-metadata">

**Author:** ![Yasmin](https://avatars.discourse-cdn.com/v4/letter/y/71c47a/32.png) [@Yasmin](https://forums.rockylinux.org/u/Yasmin)\
**Post date:** [August 23, 2024, 4:34am UTC](https://forums.rockylinux.org/t/security-patches-release-done-when-compared-to-rhel-updates/15558/8 "2024-08-23T04:34:34Z")

</div>

Can you provides security updates closeness to RHEL. For eg: Alma provides Critical and High-risk vulnerabilities (CVSS 7+) within 14 days.

---

<div class="post-metadata">

**Author:** ![label](https://avatars.discourse-cdn.com/v4/letter/l/c5a1d2/32.png) [@label](https://forums.rockylinux.org/u/label)\
**Post date:** [August 23, 2024, 6:19am UTC](https://forums.rockylinux.org/t/security-patches-release-done-when-compared-to-rhel-updates/15558/9 "2024-08-23T06:19:54Z")

</div>

As explained in an earlier reply, whatever is in RHEL will be in Rocky Linux as we strive to be as close as possible. AlmaLinux may also end up being close too but may have more, as they have different policies and methodologies to how they maintain their distribution.

> [@Yasmin](#):
>
> Can you provides security updates closeness to RHEL

Please read our wiki, which explains that we have updates between 24 and 48 hours as they are released by our upstream.

---

<div class="post-metadata">

**Author:** ![jlehtone](https://avatars.discourse-cdn.com/v4/letter/j/e9a140/32.png) [@jlehtone](https://forums.rockylinux.org/u/jlehtone)\
**Post date:** [August 23, 2024, 6:20am UTC](https://forums.rockylinux.org/t/security-patches-release-done-when-compared-to-rhel-updates/15558/10 "2024-08-23T06:20:45Z")

</div>

> [@Yasmin](#):
>
> Production support for OS and Security patches.

Rocky has community. The community is the users. Peers, who help each other. You (and I) are part of the community. You help others as much as you can. That is the “support by community”.

* * *

Red Hat releases a patch for RHEL. Rocky maintainers find source code for the patch and build it for Rocky. You paid nothing for Rocky, except the time it takes for the patch to be released for Rocky.

If some third-party offers packages for Rocky that replace what is in Rocky, then that (paid support) renders the system not-quite-Rocky. That can be fair trade for some cases.

* * *

The AlmaLinux chose to not be as similar to RHEL as Rocky is. Still very close. Nevertheless, they have more need to tell about things “not in RHEL” than Rocky.

---

<div class="post-metadata">

**Author:** ![Yasmin](https://avatars.discourse-cdn.com/v4/letter/y/71c47a/32.png) [@Yasmin](https://forums.rockylinux.org/u/Yasmin)\
**Post date:** [August 23, 2024, 9:12am UTC](https://forums.rockylinux.org/t/security-patches-release-done-when-compared-to-rhel-updates/15558/11 "2024-08-23T09:12:21Z")

</div>

are these security updates or general updates which is released within 24hours or 48 hours?

---

<div class="post-metadata">

**Author:** ![jlehtone](https://avatars.discourse-cdn.com/v4/letter/j/e9a140/32.png) [@jlehtone](https://forums.rockylinux.org/u/jlehtone)\
**Post date:** [August 23, 2024, 9:43am UTC](https://forums.rockylinux.org/t/security-patches-release-done-when-compared-to-rhel-updates/15558/12 "2024-08-23T09:43:13Z")

</div>

Yes.

Red Hat releases a larger set of updates, including features and fixes, every six months. These large sets are “point updates”. The latest was in May, the “9.4”. Then they start to develop the next point update.

At the same time they do make and release security and bug fixes for the released point update. It is these patches that Rocky tries to rebuild within 1-2 days of corresponding errata for RHEL.

* * *

We (users) do not cherry-pick packages. We run `dnf up` regularly to get all the available updates into our systems. In CentOS Linux, the predecessor of Rocky, there were never any packages tagged with “this contains security fix” or “this is not security”.

---

<div class="post-metadata">

**Author:** ![Yasmin](https://avatars.discourse-cdn.com/v4/letter/y/71c47a/32.png) [@Yasmin](https://forums.rockylinux.org/u/Yasmin)\
**Post date:** [September 10, 2024, 10:59am UTC](https://forums.rockylinux.org/t/security-patches-release-done-when-compared-to-rhel-updates/15558/13 "2024-09-10T10:59:52Z")

</div>

Hi all,

Thanks for the answers provided so far. I have fair idea of Rocky now. But I do really want to understand followings when compared to RHEL

1. Volume of Rocky Deployment base in terms of popularity?
2. Timeline for Security updates?
3. Delay in Routine bug and functional fixes?
4. Delay in OS release ?
5. Is there any reference to mission critical?

---

<div class="post-metadata">

**Author:** ![label](https://avatars.discourse-cdn.com/v4/letter/l/c5a1d2/32.png) [@label](https://forums.rockylinux.org/u/label)\
**Post date:** [September 10, 2024, 5:27pm UTC](https://forums.rockylinux.org/t/security-patches-release-done-when-compared-to-rhel-updates/15558/14 "2024-09-10T17:27:12Z")

</div>

> [@Yasmin](#):
>
> Volume of Rocky Deployment base in terms of popularity?

This number cannot be fully tracked as it does not account for usage in closed networks and hits on our CDN or our mirror manager cannot be taken as gospel.

> [@Yasmin](#):
>
> - Timeline for Security updates?
> - Delay in Routine bug and functional fixes?
> - Delay in OS release ?

> **[Rocky Linux Release and Version Guide - Rocky Linux Wiki](https://wiki.rockylinux.org/rocky/version/#timeline)**
>
> The wiki for the Rocky Linux project

> **[Rocky Linux Release and Version Guide - Rocky Linux Wiki](https://wiki.rockylinux.org/rocky/version/#general-update-timeline)**
>
> The wiki for the Rocky Linux project

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\
**Post date:** [November 9, 2024, 5:27pm UTC](https://forums.rockylinux.org/t/security-patches-release-done-when-compared-to-rhel-updates/15558/15 "2024-11-09T17:27:55Z")

</div>

Closed on November 9, 2024, 5:27pm UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
