diff --git a/roles/patching/tasks/main.yml b/roles/patching/tasks/main.yml
index 7611cac..edb3b14 100644
--- a/roles/patching/tasks/main.yml
+++ b/roles/patching/tasks/main.yml
@@ -8,3 +8,11 @@
     autoclean: yes
   when: ansible_os_family == 'Debian'
   notify: Reboot if required
+
+    # TODO consider including yum as fallback
+- name: Patch RedHat-family hosts
+  ansible.builtin.dnf:
+    # Updates all packages
+    name: "*"
+    state: latest
+  when: ansible_os_family == 'RedHat'