Fedora 28.x — End of Life
EOL Critical riskFedora 28.x reached end of life on May 28, 2019, 2705 days ago, and no longer receives security fixes. The most recent release in this series is 28. 5 CVEs are tracked for this series, including 1 critical. The next major version is Fedora 29. See Fedora 29 →
Fedora 28.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 28 | May 1, 2018 | — | May 28, 2019 | 28 | EOL |
CVEs affecting Fedora 28.x (5)
| CVE | Severity | CVSS | EPSS | KEV | Cycle | Description | Published |
|---|---|---|---|---|---|---|---|
| CVE-2019-9636 | CRITICAL | 9.8 | 7.67% | — | 28 | Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorre… | Mar 8, 2019 |
| CVE-2018-20406 | HIGH | 7.5 | 5.78% | — | 28 | Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled during… | Dec 23, 2018 |
| CVE-2018-1000879 | MEDIUM | 6.5 | 3.36% | — | 28 | libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: … | Dec 20, 2018 |
| CVE-2018-1061 | MEDIUM | 6.5 | 4.91% | — | 28 | python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the dif… | Jun 19, 2018 |
| CVE-2018-1060 | HIGH | 7.5 | 5.03% | — | 28 | python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib… | Jun 18, 2018 |
Fedora 28.x is EOL — migrate to Fedora 29.x
Fedora 29.x is the next major release. Plan your upgrade before Fedora 28.x stops receiving security patches.
Add a Fedora 28 EOL badge to your README
Show your users which Fedora version your project runs and whether it is still supported. The badge updates automatically. More formats and options →
[](https://eolcanary.com/explore/fedora/28)Frequently asked questions
Is Fedora 28 end of life?
Yes. All Fedora 28.x releases have reached end of life and no longer receive security patches. There are 5 known CVEs affecting Fedora 28.x, including 1 critical. Migrate to Fedora 29.x as soon as possible.
What CVEs affect Fedora 28?
There are 5 CVEs tracked for Fedora 28.x, including 1 critical severity issue. See the full list above with CVSS and EPSS scores.
What is the latest Fedora 28 version?
The latest Fedora 28.x patch release is 28, released on May 1, 2018. Always run the latest patch to benefit from all security fixes.
How to migrate from Fedora 28 to Fedora 29?
To migrate from Fedora 28 to Fedora 29: (1) review the official Fedora 29 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run Fedora 28 in production?
No. Fedora 28 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA