Information specific to security backporting policies here: https://access.redhat.com/security/updates/backporting/