Fedora 38.x — End of Life
EOL High riskFedora 38.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 38 | Apr 18, 2023 | — | May 21, 2024 | 38 | EOL |
CVEs affecting Fedora 38.x (6)
| CVE | Severity | CVSS | EPSS | KEV | Cycle | Description | Published |
|---|---|---|---|---|---|---|---|
| CVE-2024-27012 | MEDIUM | 5.5 | 0.26% | — | 38 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: restore set elements when del… | May 1, 2024 |
| CVE-2024-28960 | HIGH | 8.2 | 0.84% | — | 38 | An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto. The PSA C… | Mar 29, 2024 |
| CVE-2024-22049 | MEDIUM | 5.3 | 1.29% | — | 38 | httparty before 0.21.0 is vulnerable to an assumed-immutable web parameter vulnerability. A remote and unauthenticated a… | Jan 4, 2024 |
| CVE-2023-43615 | HIGH | 7.5 | 0.78% | — | 38 | Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow. | Oct 7, 2023 |
| CVE-2023-4806 | MEDIUM | 5.9 | 1.44% | — | 38 | A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has… | Sep 18, 2023 |
| CVE-2023-25136 | MEDIUM | 6.5 | 89.95% | — | 38 | OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed i… | Feb 3, 2023 |
Fedora 38.x is EOL — migrate to Fedora 39.x
Fedora 39.x is the next major release. Plan your upgrade before Fedora 38.x stops receiving security patches.
Frequently asked questions
Is Fedora 38 end of life?
Yes. All Fedora 38.x releases have reached end of life and no longer receive security patches. There are 6 known CVEs affecting Fedora 38.x. Migrate to Fedora 39.x as soon as possible.
What CVEs affect Fedora 38?
There are 6 CVEs tracked for Fedora 38.x. See the full list above with CVSS and EPSS scores.
What is the latest Fedora 38 version?
The latest Fedora 38.x patch release is 38, released on April 18, 2023. Always run the latest patch to benefit from all security fixes.
How to migrate from Fedora 38 to Fedora 39?
To migrate from Fedora 38 to Fedora 39: (1) review the official Fedora 39 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run Fedora 38 in production?
No. Fedora 38 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA