Following the release of RHEL 9.3, AlmaLinux 9.3 has also been released, focusing on enhanced security and updates to developer and system tools.
AlmaLinux continues to grow in popularity as an alternative to the free version of Red Hat Enterprise Linux (RHEL), particularly since CentOS shifted its focus to a rolling-release model via CentOS Stream.
It is an undeniable fact that AlmaLinux consistently sets the benchmark for fast and efficient releases, a fact once again demonstrated by the launch of AlmaLinux 9.3. True to its reputation, the distribution closely followed in the footsteps of RHEL 9.3, releasing its own updated version just six days later, on 13 November 2023. Let’s take a look at the new features and updates included in this release.
It's here! AlmaLinux 9.3 is now available and aims to improve flexibility, reliability, and enhance security across hybrid environments. 👏
— AlmaLinux (@AlmaLinux) November 24, 2023
Read more about the release here: https://t.co/cT0rSXV2Pm #Linux #OpenSource pic.twitter.com/oUO247PPuW
ABI compatibility with RHEL
AlmaLinux 9.3, codenamed “Shamrock Pampas Cat” and based on the Linux kernel 5.14 (specifically 5.14.0-362.8.1.el9_3), is the first release to be produced following Red Hat’s decision to restrict access to its source code. AlmaLinux has responded to this by ensuring that it is not “bug-for-bug” identical to RHEL, but rather ABI-compatible: programs compiled for RHEL and packages built for it will run on AlmaLinux without modification, whilst AlmaLinux can also incorporate its own bug fixes. The release has also been developed with a strong focus on security.
Security updates
In light of this, Keylime, a sophisticated software solution focused on enhancing the security and integrity of various IT systems, has been released in version 7.3.0. Furthermore, OpenSSH, one of the most widely used tools for secure network communication, has moved further away from the less secure SHA-1 hash algorithm.
AlmaLinux 9.3 has also significantly improved its security features by incorporating developments supporting the EMS (Extended Master Secret) extension, as described in RFC 7627.
This integration is particularly significant as it meets the requirements of the FIPS-140-3 standard, which is one of the most important benchmarks for cryptographic security. Specifically, this development is mandatory for all TLS 1.2 connections, which are widely used for secure communication over the internet.
However, the security-focused updates do not end there. SETools, which includes a suite of graphical and command-line tools and libraries required for analysing SELinux policies, has been updated to version 4.4.3, whilst OpenSCAP has been updated to version 1.3.8. The SCAP Security Guide has been updated to version 0.1.69: the ANSSI profiles have been updated to version 2.0, and three new profiles, aligned with the Spanish CCN-STIC-610A22 guideline, have been added. The pcsc-lite-ccid smart card driver has been updated to version 1.5.2.
Developer and system tools
At the same time, a number of system and development tools have also been updated in the AlmaLinux 9.3 release:
| Area | Versions |
|---|---|
| Languages, web and database servers | Node.js 20, Apache HTTP Server 2.4.57, Redis 7 |
| Basic toolchain | GCC 11.4.1 |
| Compilers and toolkits | GCC Toolset 13, LLVM Toolset 16.0.6, Rust Toolset 1.71.1, Go Toolset 1.20.10 |
| Debugging | Valgrind 3.21, SystemTap 4.9, elfutils 0.189 |
| Performance monitoring | PCP 6.0.5, Grafana 9.2.10 |
According to the announcement, the web console has also been improved; health checks can now be configured for Podman containers, whilst vsock tools can also be used in virtual machines. Node.js 20 and Redis 7 can be installed via the module system:
dnf module install nodejs:20
dnf module install redis:7
Finally, if you’re using Alma as a desktop system, the distro (as with the previous 9.2 release) comes with GNOME 40.4 by default. You can find more detailed information about all the changes in the official announcement or here.
However, for a more detailed examination of the updates included in this release, it is advisable to consult the RHEL 9.3 release notes.
Download, check and update
AlmaLinux 9.3 is available for four architectures, including x86_64, arm64, ppc64le and s390x. The ISO installation image can be downloaded from the usual public mirror. You can check the integrity of the downloaded image file as follows:
wget https://repo.almalinux.org/almalinux/RPM-GPG-KEY-AlmaLinux-9
gpg --import RPM-GPG-KEY-AlmaLinux-9
wget https://vault.almalinux.org/9.3/isos/x86_64/CHECKSUM
gpg --verify CHECKSUM
sha256sum AlmaLinux-9.3-x86_64-boot.iso
In the output of gpg --verify, you should see the line “Good signature from ‘AlmaLinux OS 9’” (the warning “not certified with a trusted signature” is normal in this case), and the result of sha256sum should match the value in the CHECKSUM file.
On an existing AlmaLinux 9 system, the dnf upgrade -y command will update to the latest point release. You can upgrade from AlmaLinux 8 to 9 without reinstalling by following our ELevate guide.
How long will AlmaLinux 9 be supported?
Active support for AlmaLinux 9 will continue until 31 May 2027, and security updates will be provided until 31 May 2032. Further releases in the 9 series:
- AlmaLinux 9.0 (May 2022)
- AlmaLinux 9.1 (November 2022)
- AlmaLinux 9.2 (May 2023)
- AlmaLinux 9.4 (May 2024)
- AlmaLinux 9.5 (November 2024)
- AlmaLinux 9.6 (May 2025)
- AlmaLinux 9.7 (November 2025)
- AlmaLinux 9.8 (May 2026)
AlmaLinux is also an available operating system on our KVM VPS servers, and if you need a whole machine, you can run it on a dedicated server too.