Ubuntu 17.x — End of Life
EOL Actively exploitedUbuntu 17.x reached end of life on Jul 19, 2018, 3018 days ago, and no longer receives security fixes. The most recent release in this series is 17.10. 10 CVEs are tracked for this series, including 1 critical and 2 actively exploited according to CISA KEV. 1 of them was published after the end of life of the affected cycle and will not get an official patch. The next major version is Ubuntu 18. See Ubuntu 18 →
Ubuntu 17.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 17.10 | Oct 19, 2017 | Jul 19, 2018 | Jul 19, 2018 | 17.10 | EOL | |
| 17.04 | Apr 13, 2017 | Jan 13, 2018 | Jan 13, 2018 | 17.04 | EOL |
CVEs affecting Ubuntu 17.x (12)
| CVE | Severity | CVSS | EPSS | KEV | Cycle | Description | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-31431 | HIGH | 7.8 | 3.43% | KEV | 17.10 | In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-pla… | Apr 22, 2026 |
| CVE-2026-31431 | HIGH | 7.8 | 3.43% | KEV | 17.04 | In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-pla… | Apr 22, 2026 |
| CVE-2018-13785 | MEDIUM | 6.5 | 4.41% | — | 17.10 | In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an i… | Jul 9, 2018 |
| CVE-2018-0732 | HIGH | 7.5 | 48.83% | — | 17.10 | During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime v… | Jun 12, 2018 |
| CVE-2018-3639 | MEDIUM | 5.5 | 60.63% | — | 17.10 | Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addres… | May 22, 2018 |
| CVE-2018-8014 | CRITICAL | 9.8 | 21.31% | — | 17.10 | The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0… | May 16, 2018 |
| CVE-2018-0737 | MEDIUM | 5.9 | 11.59% | — | 17.10 | The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attac… | Apr 16, 2018 |
| CVE-2018-1304 | MEDIUM | 5.9 | 17.07% | — | 17.10 | The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomc… | Feb 28, 2018 |
| CVE-2018-1305 | MEDIUM | 6.5 | 14.47% | — | 17.10 | Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 t… | Feb 23, 2018 |
| CVE-2017-5753 | MEDIUM | 5.6 | 93.83% | — | 17.10 | Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of … | Jan 4, 2018 |
| CVE-2017-5753 | MEDIUM | 5.6 | 93.83% | — | 17.04 | Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of … | Jan 4, 2018 |
| CVE-2017-12617 | HIGH | 8.1 | 99.96% | KEV | 17.10 | When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT… | Oct 4, 2017 |
Ubuntu 17.x is EOL — migrate to Ubuntu 18.x
Ubuntu 18.x is the next major release. Plan your upgrade before Ubuntu 17.x stops receiving security patches.
Add a Ubuntu 17 EOL badge to your README
Show your users which Ubuntu version your project runs and whether it is still supported. The badge updates automatically. More formats and options →
[](https://eolcanary.com/explore/ubuntu/17)Frequently asked questions
Is Ubuntu 17 end of life?
Yes. All Ubuntu 17.x releases have reached end of life and no longer receive security patches. There are 10 known CVEs affecting Ubuntu 17.x, including 1 critical. Migrate to Ubuntu 18.x as soon as possible.
What CVEs affect Ubuntu 17?
There are 10 CVEs tracked for Ubuntu 17.x, including 1 critical severity issue and 2 listed in the CISA Known Exploited Vulnerabilities catalog. See the full list above with CVSS and EPSS scores.
What is the latest Ubuntu 17 version?
The latest Ubuntu 17.x patch release is 17.10, released on October 19, 2017. Always run the latest patch to benefit from all security fixes.
How to migrate from Ubuntu 17 to Ubuntu 18?
To migrate from Ubuntu 17 to Ubuntu 18: (1) review the official Ubuntu 18 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.
Is it safe to run Ubuntu 17 in production?
No. Ubuntu 17 has reached end of life and security vulnerabilities are no longer patched. Critically, 2 CVEs affecting Ubuntu 17.x are in the CISA KEV catalog — meaning they are actively exploited in the wild. Upgrade to a supported version immediately.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA