Definition

Security update

An update whose main purpose is to fix vulnerabilities; must be provided free of charge, promptly and securely during the support period.

An operating system or application update, including security patches, whose main purpose is to address security vulnerabilities. Under Annex I Part II(7)–(8) security updates must be distributed through secure mechanisms, without delay and free of charge, accompanied by advisory messages, and — where technically feasible — separately from functionality updates. Security updates are not substantial modifications.

Reference: Art. 3 (definition of security update); Annex I Part II(7)–(8) · Regulation (EU) 2024/2847 on EUR-Lex

Updated 2026-09-12 · Paraphrase for orientation, not legal advice.