# Security updates delay in Rocky

**URL:** <https://forums.rockylinux.org/t/security-updates-delay-in-rocky/20281>\
**Category:** Rocky Linux Help & Support\
**Created:** [March 11, 2026, 11:03pm UTC](https://forums.rockylinux.org/t/security-updates-delay-in-rocky/20281 "2026-03-11T23:03:36Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![meta](https://avatars.discourse-cdn.com/v4/letter/m/f17d59/32.png) [@meta](https://forums.rockylinux.org/u/meta)\
**Post date:** [March 11, 2026, 11:03pm UTC](https://forums.rockylinux.org/t/security-updates-delay-in-rocky/20281/1 "2026-03-11T23:03:36Z")

</div>

Is there a publicly available metric that tracks drift between security updates available in RHEL and Rocky?

E.g. what’s the time diff. between when a security update is available to RHEL and Rocky users.

I have found [this answer](https://forums.rockylinux.org/t/worried-about-rocky-linux-not-updating-packages-promptly/3343/13), but wonder if this is being quantified and tracked somewhere.

**P.S.** [https://repocompare.rockylinux.org/](https://repocompare.rockylinux.org/) is 403 at the time of writing.

---

<div class="post-metadata">

**Author:** ![label](https://avatars.discourse-cdn.com/v4/letter/l/c5a1d2/32.png) [@label](https://forums.rockylinux.org/u/label)\
**Post date:** [March 11, 2026, 11:24pm UTC](https://forums.rockylinux.org/t/security-updates-delay-in-rocky/20281/2 "2026-03-11T23:24:33Z")

</div>

There is not a page that tracks what you’re looking for.

The answer you are linking to is better clarified [at our wiki](https://wiki.rockylinux.org/rocky/version/#general-update-timeline). As this is a project lead and built by volunteers, 24-48 hours is the minimum. This is a general expectation, but cannot be assumed to be the rule. It can be faster or it can be slower, depending on volunteer time and severity of the updates that need to be built.

* * *

As an aside, the repocompare pages are dead, and even if it wasn’t, it was _never_ a valid way to track drift. That wasn’t its purpose. Its purpose was for Release Engineering (my team) and the Testing team to verify our repositories are close to what is upstream. The closest you’re going to get when it comes to seeing what updates have been pushed by upstream and may or may not have been published by us is the [incoming page](https://incoming.releng.rockylinux.org/). However, _no one should be relying on this page for tracking anything_ as the page is not (and cannot be) 100% accurate. Use it as a starting point, but don’t rely on it as the absolute truth.

If your concern is having updates available as soon as possible, you may want to consider using RHEL with a developer subscription.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\
**Post date:** [May 10, 2026, 11:24pm UTC](https://forums.rockylinux.org/t/security-updates-delay-in-rocky/20281/3 "2026-05-10T23:24:59Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.