{"id":184241,"date":"2026-11-12T23:40:34","date_gmt":"2026-11-12T21:40:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/vypusk-red-hat-enterprise-linux-10-3-i-9-9"},"modified":"2026-11-12T23:40:38","modified_gmt":"2026-11-12T21:40:38","slug":"red-hat-enterprise-linux-10-3-and-9-9-released","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/red-hat-enterprise-linux-10-3-and-9-9-released","title":{"rendered":"Release of Red Hat Enterprise Linux 10.3 and 9.9","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Red Hat has released the distribution of Red Hat Enterprise Linux 10.3, along with an update to the previous branch \u2014 Red Hat Enterprise Linux 9.9. The installation images are available for registered users on the Red Hat Customer Portal (public iso images of CentOS Stream 10 and free RHEL builds for developers can be used to evaluate functionality). The release is prepared for the x86_64, s390x (IBM System z), ppc64le (POWER9), Aarch64 (ARM64), and RISC-V (preview) architectures. The RHEL 10 branch will be supported until 2035 (+ 4 years of extended paid support), RHEL 9 \u2014 until the end of May 2032, and RHEL 8 \u2014 until 2029. <\/p>\n
RHEL packages are not hosted in the public repository git.centos.org and are provided to clients only through a closed section of the website, where a user agreement (EULA) operates that prohibits redistribution of data downloaded through the customer portal, creating legal risks when using these packages to create derivative distributions. The source texts of RHEL remain available in the CentOS Stream repository, but it is not fully synchronized with RHEL and package versions in it do not always match those from RHEL. Rocky Linux, Oracle, and SUSE reproduce the source texts of rpm packages of RHEL releases as part of the OpenELA project.<\/p>\n
Key changes in RHEL 10.3 (most of the noted changes are also present in RHEL 9.9): <\/p>\n
\n
Support for post-quantum encryption algorithms has been expanded. SSH now includes support for the mlkem768nistp256-sha256 and mlkem1024nistp384-sha384 algorithms. In libreswan, support for post-quantum key exchange algorithms ML-KEM-768 and ML-KEM-1024 has been added to the implementation of IPsec and IKE (Internet Key Exchange) protocols. The rust-sequoia-sqv package, which implements the gpgv utility in Rust, has been updated with full support for post-quantum encryption algorithms defined in the new OpenPGP specification. The audit package now supports post-quantum algorithms in TLS 1.3 and the use of PSK authentication when sending logs to external hosts. OpenSC has added support for the PKCS #11 v3.2 specification and post-quantum encryption.\n
The eBPF and Perf subsystems have been synchronized with the Linux kernel 6.19.\n
The kernel builds for CentOS Stream include components in the RV (Runtime Verification) subsystem, designed to verify the correctness of high-reliability systems, including the monitoring components 'sched' for analyzing task scheduler behavior and 'rtapp' (Real-time application monitor) for tracking common issues in real-time applications.\n
The rtla toolkit, used for analyzing the operation of the real-time mode in the kernel, has added support for connecting custom eBPF handlers to perform actions when specific threshold values are exceeded, as well as enhanced the capabilities for analyzing EFI call stacks using the timerlat utility.\n
In the IMA (Integrity Measurement Architecture) mechanism, used to verify the integrity of operating system components via digital signatures and hashes, checks on certain file systems that were previously ignored (such as tmpfs and ramfs) have been tightened.\n
The kernel module tboot (Trusted Boot) has expanded support for Intel TXT (Trusted Execution Technology).\n
Improved support for the Intel RDT (Intel Resource Director Technology) extension allows tracking and limiting the use of specific processor resources.\n
An experimental driver amdxdna for AMD's NPU chips (Neural Processing Unit) has been included.\n
The image-builder console tool has been made available for building system images with specified parameters and settings. The bootc-image-builder utility is deprecated but will continue to be supported as part of the RHEL 10 lifecycle. The web console has added support for building images compatible with bootc from any base images available on the current system, including images from Fedora, CentOS Stream, and arbitrary containers. The names of system image types are synchronized between the console tool and the web interface (for example, aws for Amazon Machine Image (AMI) and guest-image for QCOW2). Support for creating custom builds for the Hummingbird distribution (Fedora edition based on containers) has been added.\n
The RHEL for Edge edition has implemented the ability to deploy edge systems using FIDO Device Onboard (FDO). The FDO implementation in Rust (fdo-rs, fido-device-onboard) has been replaced with the go-fdo version in Go, while the bash-based greenboot utility has been replaced with a Rust implementation (greenboot-rs). During updates, automatic migration of images from bootc to using greenboot-rs is ensured. Greenboot is used in atomically updatable variants of RHEL to check system status at startup and roll back to a previous version when issues are detected.\n
In the fapolicyd (File Access Policy Daemon) framework, which defines which programs can be run by a specific user and which cannot, multithreaded parallel processing of operations, dynamic database size adjustment, and integration with the systemd watchdog service have been implemented.\n