Red Hat presented the release of the distribution kit Red Hat Enterprise Linux 10.3, as well as an update to the previous branch – Red Hat Enterprise Linux 9.9. Ready-made installation images are available for registered users of the Red Hat Customer Portal (public iso images CentOS Stream 10, as well as free builds RHEL for developers). The release is designed for x86_64, s390x (IBM System z), ppc64le (POWER9), Aarch64 (ARM64) and RISC-V (preview) architectures. The RHEL 10 branch will be maintained until 2035 (+ 4 years of extended paid support), RHEL 9 until the end of May 2032, and RHEL 8 until 2029.
RHEL packages are not hosted in a public repository git.centos.org and are provided to the company’s clients only through a closed section of the site, which has a user agreement (EULA) prohibiting the redistribution of data downloaded through the client portal, which creates legal risks when using these packages to create derivative distributions. The RHEL sources remain available in the CentOS Stream repository, but it is not fully synchronized with RHEL and the package versions in it do not always match the packages from RHEL. Rocky Linux, Oracle and SUSE reproduce the sources of the RHEL release rpm packages within the OpenELA project.
Main changes in RHEL 10.3 (most of the noted changes are also present in RHEL 9.9):
- Expanded support for post-quantum encryption algorithms. Added support for the mlkem768nistp256-sha256 and mlkem1024nistp384-sha384 algorithms to SSH. In libreswan, support for post-quantum key exchange algorithms ML-KEM-768 and ML-KEM-1024 has been added to the implementation of the IPsec and IKE (Internet Key Exchange) protocols. The rust-sequoia-sqv package, which implements the gpgv utility in the Rust language, has added full support for post-quantum encryption algorithms defined in the new OpenPGP specification. The audit package has added support for post-quantum algorithms in TLS 1.3 and the use of PSK authentication when transferring logs to external hosts. OpenSC has added support for the PKCS #11 v3.2 specification and post-quantum encryption.
- The eBPF and Perf subsystems are synchronized with the Linux kernel 6.19.