I guess it depends what you mean by value-added. Red Hat Secure
Server is off-the-shelf Apache plus off-the-shelf patches; the only
value they add to that is a few bundled admin widgets and, more
significantly, the RSA license. Compare to software produced by Red
Hat themselves (the obvious examples are RPM and the work they've
contributed to GNOME) --- that's stuff which has added a whole lot
more value to their core Linux distributions. (And other peoples' as
well, but hey, that's the open-source community).