CIQ engineers have released the Rocky Linux 9 errata subsystem as an open source project and fully integrated it with the open source build system Peridot. The Rocky Linux 9 errata is now available through the Rocky Enterprise Software Foundation (RESF), which will continue to maintain the project.
For the first time an enterprise Linux distribution can be built and enhanced by the open source community thanks to the Peridot build system, now with full access to the latest errata and supporting infrastructure, contributing to software supply chain security for the enterprise.
The use of errata is a critical aspect in managing supply chain security, as it provides the reporting necessary to have transparency of the latest bug fixes, CVEs, functionality enhancements and more, all in real time. By making this information fully available alongside Rocky Linux repositories, the RESF is aiding users to do more granular maintenance to their systems.
Rocky Linux is now including this information in full in their current supported repositories, but is also making historical data available through their Web UI. The RESF will also be providing full API access to this data.