RHEL 5.x — End of Life
EOL Medium riskRHEL 5.x reached end of life on Mar 31, 2017, 3477 days ago, and no longer receives security fixes. The most recent release in this series is 5.11. 2 CVEs are tracked for this series. The next major version is RHEL 6. See RHEL 6 →
RHEL 5.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 5LTS | Mar 15, 2007 | Jan 8, 2013 | Mar 31, 2017 | 5.11 | EOL |
CVEs affecting RHEL 5.x (2)
| CVE | Severity | CVSS | EPSS | KEV | Cycle | Description | Published |
|---|---|---|---|---|---|---|---|
| CVE-2015-8553 | MEDIUM | 6.5 | 0.38% | — | 5 | Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not e… | Apr 13, 2016 |
| CVE-2014-3566 | LOW | 3.4 | 99.99% | — | 5 | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak… | Oct 15, 2014 |
RHEL 5.x is EOL — migrate to RHEL 6.x
RHEL 6.x is the next major release. Plan your upgrade before RHEL 5.x stops receiving security patches.
Add a RHEL 5 EOL badge to your README
Show your users which RHEL version your project runs and whether it is still supported. The badge updates automatically. More formats and options →
[](https://eolcanary.com/explore/rhel/5)Frequently asked questions
Is RHEL 5 end of life?
Yes. All RHEL 5.x releases have reached end of life and no longer receive security patches. There are 2 known CVEs affecting RHEL 5.x. Migrate to RHEL 6.x as soon as possible.
What CVEs affect RHEL 5?
There are 2 CVEs tracked for RHEL 5.x. See the full list above with CVSS and EPSS scores.
What is the latest RHEL 5 version?
The latest RHEL 5.x patch release is 5.11, released on September 16, 2014. Always run the latest patch to benefit from all security fixes.
How to migrate from RHEL 5 to RHEL 6?
To migrate from RHEL 5 to RHEL 6: (1) review the official RHEL 6 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run RHEL 5 in production?
No. RHEL 5 has reached end of life and security vulnerabilities are no longer patched. Upgrade to a supported version immediately.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA
