Red Hat Enterprise Linux Life Cycle

Red Hat Enterprise Linux 8 EUS Maintenance Policy; and Red Hat Enterprise Linux 9 and 10 EUS/Enhanced EUS Maintenance Policy

The Red Hat Enterprise Linux 8 Extended Update Support maintenance policy; and the Red Hat Enterprise Linux 9 Extended Update Support/Enhanced Extended Update Support maintenance policy consist of addressing (a) security related issues for active software packages in Red Hat Enterprise Linux version 8 & 9, and (b) Urgent bugs for a specified list of packages as detailed below.

Security Maintenance

• Red Hat may provide security fixes for Critical, Important, and Moderate CVEs with a CVSS score of 7 or higher as defined by Red Hat in a Red Hat Security Advisory (RHSA)v; and Urgent and Selected High Priority Bug Fix as defined by Red Hat in a Red Hat Bug Advisory (RHBA) for packages within Red Hat Enterprise Linux as long as the package is not in end of life.
• Packages within RHEL 8, 9, and 10 Application Streams may have a shorter life cycle than a specific RHEL minor release
• Please refer to the Application Streams life cycle section for more details
• The policy applies ONLY on current active minor releases per the Red Hat Enterprise Linux Life Cycle policy
• Definition of Critical and Important Impact CVEs is defined by the Red Hat Security Policy

Bug Fix Maintenance

• The inclusions list below is a minimum set of packages that apply to Urgent bug fixes.
• bind, bash, chrony, grub2, grubby, glibc, gnutls, httpd, kernel, libgcrypt, libvirt, nss, openssh, openssl, python 3.6 (RHEL 8), python 3.9 (RHEL 9), python 3.12 (RHEL 10), qemu-kvm, rpm, sudo, systemd, wget, yum / dnf
• Urgent bugs not on the list may be addressed at Red Hat discretion.
• The policy applies ONLY on current active minor releases per the Red Hat Enterprise Linux Life Cycle Policy.

Note: Active minor releases refers to the period of time a specific minor release is maintained. For example, RHEL 10.0 with EUS is active for 24 months from general availability.