Fedora 29.x — End of Life
EOL Critical riskFedora 29.x reached end of life on Nov 26, 2019, 2523 days ago, and no longer receives security fixes. The most recent release in this series is 29. 19 CVEs are tracked for this series, including 5 critical. The next major version is Fedora 30. See Fedora 30 →
Fedora 29.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 29 | Oct 30, 2018 | — | Nov 26, 2019 | 29 | EOL |
CVEs affecting Fedora 29.x (19)
| CVE | Severity | CVSS | EPSS | KEV | Cycle | Description | Published |
|---|---|---|---|---|---|---|---|
| CVE-2019-16910 | MEDIUM | 5.3 | 1.77% | — | 29 | Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insuff… | Sep 26, 2019 |
| CVE-2019-16056 | HIGH | 7.5 | 5.12% | — | 29 | An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The e… | Sep 6, 2019 |
| CVE-2019-14439 | HIGH | 7.5 | 10.76% | — | 29 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typ… | Jul 30, 2019 |
| CVE-2019-14379 | CRITICAL | 9.8 | 8.11% | — | 29 | SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (becau… | Jul 29, 2019 |
| CVE-2019-10160 | CRITICAL | 9.8 | 5.22% | — | 29 | A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 af… | Jun 7, 2019 |
| CVE-2019-11091 | MEDIUM | 5.6 | 0.61% | — | 29 | Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing specul… | May 30, 2019 |
| CVE-2018-12130 | MEDIUM | 5.9 | 1.56% | — | 29 | Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative executi… | May 30, 2019 |
| CVE-2018-12127 | MEDIUM | 5.6 | 1.51% | — | 29 | Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution m… | May 30, 2019 |
| CVE-2018-12126 | MEDIUM | 5.6 | 1.51% | — | 29 | Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execu… | May 30, 2019 |
| CVE-2019-11068 | CRITICAL | 9.8 | 5.23% | — | 29 | libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permi… | Apr 10, 2019 |
| CVE-2019-9948 | CRITICAL | 9.1 | 11.84% | — | 29 | urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypas… | Mar 23, 2019 |
| CVE-2018-12023 | HIGH | 7.5 | 8.87% | — | 29 | An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enab… | Mar 21, 2019 |
| CVE-2018-12022 | HIGH | 7.5 | 7.28% | — | 29 | An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enab… | Mar 21, 2019 |
| CVE-2019-9636 | CRITICAL | 9.8 | 7.67% | — | 29 | Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorre… | Mar 8, 2019 |
| CVE-2018-20406 | HIGH | 7.5 | 5.78% | — | 29 | Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled during… | Dec 23, 2018 |
| CVE-2018-1000880 | MEDIUM | 6.5 | 4.05% | — | 29 | libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0 onwards) contains a CWE-20: I… | Dec 20, 2018 |
| CVE-2018-1000879 | MEDIUM | 6.5 | 3.36% | — | 29 | libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: … | Dec 20, 2018 |
| CVE-2018-1061 | MEDIUM | 6.5 | 4.91% | — | 29 | python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the dif… | Jun 19, 2018 |
| CVE-2018-1060 | HIGH | 7.5 | 5.03% | — | 29 | python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib… | Jun 18, 2018 |
Fedora 29.x is EOL — migrate to Fedora 30.x
Fedora 30.x is the next major release. Plan your upgrade before Fedora 29.x stops receiving security patches.
Add a Fedora 29 EOL badge to your README
Show your users which Fedora version your project runs and whether it is still supported. The badge updates automatically. More formats and options →
[](https://eolcanary.com/explore/fedora/29)Frequently asked questions
Is Fedora 29 end of life?
Yes. All Fedora 29.x releases have reached end of life and no longer receive security patches. There are 19 known CVEs affecting Fedora 29.x, including 5 critical. Migrate to Fedora 30.x as soon as possible.
What CVEs affect Fedora 29?
There are 19 CVEs tracked for Fedora 29.x, including 5 critical severity issues. See the full list above with CVSS and EPSS scores.
What is the latest Fedora 29 version?
The latest Fedora 29.x patch release is 29, released on October 30, 2018. Always run the latest patch to benefit from all security fixes.
How to migrate from Fedora 29 to Fedora 30?
To migrate from Fedora 29 to Fedora 30: (1) review the official Fedora 30 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run Fedora 29 in production?
No. Fedora 29 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA