Fedora 22.x — End of Life
EOL Actively exploitedFedora 22.x reached end of life on Jul 19, 2016, 3748 days ago, and no longer receives security fixes. The most recent release in this series is 22. 4 CVEs are tracked for this series, including 1 critical and 2 actively exploited according to CISA KEV. The next major version is Fedora 23. See Fedora 23 →
Fedora 22.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 22 | May 26, 2015 | — | Jul 19, 2016 | 22 | EOL |
CVEs affecting Fedora 22.x (4)
| CVE | Severity | CVSS | EPSS | KEV | Cycle | Description | Published |
|---|---|---|---|---|---|---|---|
| CVE-2016-3674 | HIGH | 7.5 | 8.17% | — | 22 | Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Drive… | May 17, 2016 |
| CVE-2015-5291 | MEDIUM | 6.8 | 3.65% | — | 22 | Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.… | Nov 2, 2015 |
| CVE-2015-5477 | HIGH | 7.5 | 99.40% | KEV | 22 | named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (… | Jul 29, 2015 |
| CVE-2015-3306 | CRITICAL | 10.0 | 99.49% | KEV | 22 | The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and … | May 18, 2015 |
Fedora 22.x is EOL — migrate to Fedora 23.x
Fedora 23.x is the next major release. Plan your upgrade before Fedora 22.x stops receiving security patches.
Add a Fedora 22 EOL badge to your README
Show your users which Fedora version your project runs and whether it is still supported. The badge updates automatically. More formats and options →
[](https://eolcanary.com/explore/fedora/22)Frequently asked questions
Is Fedora 22 end of life?
Yes. All Fedora 22.x releases have reached end of life and no longer receive security patches. There are 4 known CVEs affecting Fedora 22.x, including 1 critical. Migrate to Fedora 23.x as soon as possible.
What CVEs affect Fedora 22?
There are 4 CVEs tracked for Fedora 22.x, including 1 critical severity issue and 2 listed in the CISA Known Exploited Vulnerabilities catalog. See the full list above with CVSS and EPSS scores.
What is the latest Fedora 22 version?
The latest Fedora 22.x patch release is 22, released on May 26, 2015. Always run the latest patch to benefit from all security fixes.
How to migrate from Fedora 22 to Fedora 23?
To migrate from Fedora 22 to Fedora 23: (1) review the official Fedora 23 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run Fedora 22 in production?
No. Fedora 22 has reached end of life and security vulnerabilities are no longer patched. Critically, 2 CVEs affecting Fedora 22.x are in the CISA KEV catalog — meaning they are actively exploited in the wild. Upgrade to a supported version immediately.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA