{"id":170818,"date":"2026-05-16T12:24:28","date_gmt":"2026-05-16T10:24:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/rocky-linux-vvyol-v-stroj-repozitorij-dlya-operativnogo-ustraneniya-uyazvimostej"},"modified":"2026-05-16T12:24:28","modified_gmt":"2026-05-16T10:24:28","slug":"rocky-linux-vvyol-v-stroj-repozitorij-dlya-operativnogo-ustraneniya-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/rocky-linux-vvyol-v-stroj-repozitorij-dlya-operativnogo-ustraneniya-uyazvimostej","title":{"rendered":"Rocky Linux has launched a repository for the prompt resolution of vulnerabilities","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
The developers of the Rocky Linux distribution announced the creation of a separate repository for the unscheduled release of urgent package updates to address vulnerabilities, which is not synchronized with the repositories of Red Hat Enterprise Linux. It is noted that the Rocky Linux project adheres to the principle of being as close as possible to the package base of RHEL, while the emerging security threats necessitate an exception. <\/p>\n
The 'security' repository will only publish emergency updates, structured when critical vulnerabilities are disclosed without prior notice and a working exploit exists, but the RHEL developers have not yet managed to create updates with fixes. Such a situation has been observed with vulnerabilities Copy Fail, Dirty Frag, and Fragnesia. <\/p>\n
Thanks to the 'security' repository, the Rocky Linux project will be able to independently and promptly publish updates without waiting for Red Hat to do so. After the release of a fix from RHEL, the package published for RHEL will replace the package with a fix from Rocky Linux. By default, the 'security' repository is disabled and requires the command 'sudo dnf --enablerepo=security update' to be activated. <\/p>\n