Fedora 23.x — End of Life
EOL High riskFedora 23.x reached end of life on Dec 20, 2016, 3594 days ago, and no longer receives security fixes. The most recent release in this series is 23. 2 CVEs are tracked for this series. The next major version is Fedora 24. See Fedora 24 →
Fedora 23.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 23 | Nov 3, 2015 | — | Dec 20, 2016 | 23 | EOL |
CVEs affecting Fedora 23.x (2)
| CVE | Severity | CVSS | EPSS | KEV | Cycle | Description | Published |
|---|---|---|---|---|---|---|---|
| CVE-2016-3674 | HIGH | 7.5 | 8.17% | — | 23 | Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Drive… | May 17, 2016 |
| CVE-2015-5291 | MEDIUM | 6.8 | 3.65% | — | 23 | Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.… | Nov 2, 2015 |
Fedora 23.x is EOL — migrate to Fedora 24.x
Fedora 24.x is the next major release. Plan your upgrade before Fedora 23.x stops receiving security patches.
Add a Fedora 23 EOL badge to your README
Show your users which Fedora version your project runs and whether it is still supported. The badge updates automatically. More formats and options →
[](https://eolcanary.com/explore/fedora/23)Frequently asked questions
Is Fedora 23 end of life?
Yes. All Fedora 23.x releases have reached end of life and no longer receive security patches. There are 2 known CVEs affecting Fedora 23.x. Migrate to Fedora 24.x as soon as possible.
What CVEs affect Fedora 23?
There are 2 CVEs tracked for Fedora 23.x. See the full list above with CVSS and EPSS scores.
What is the latest Fedora 23 version?
The latest Fedora 23.x patch release is 23, released on November 3, 2015. Always run the latest patch to benefit from all security fixes.
How to migrate from Fedora 23 to Fedora 24?
To migrate from Fedora 23 to Fedora 24: (1) review the official Fedora 24 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run Fedora 23 in production?
No. Fedora 23 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA