Fedora Linux 45 is finally here. The Fedora Project made it official on November 3, two weeks later than the original October 20 target, and it’s one of the more interesting Fedora releases in a while. Not because of a flashy new desktop (though GNOME 51 and KDE Plasma 6.8 are both on board), but because a lot of the changes sit in places most people never look: the console you see when something breaks, how RPM treats unsigned packages, and what a random app on your desktop is allowed to poke at.
That’s the Fedora formula. It ships new stuff early so the rest of the Linux world can see how it holds up. Fedora 45 leans into that harder than usual, and it also comes with a couple of habits you may need to change.
First, the late arrival. Fedora 45 slipped once to October 27, then again to November 3. As Linuxiac reported, the Final RC-1.2 release candidate was voted NO-GO at the October 22 Go/No-Go meeting because blocker bugs were still open. The accepted blocker at that point involved encrypted Stratis storage pools that could fail to come up at boot, which is a little awkward given that Stratis support is one of this release’s headline features. Other proposed blockers covered SSH key passphrases not unlocking after an upgrade from Fedora 44, migrated GNOME Online Accounts credentials, and an SELinux policy update that broke SSH port forwarding.
I’d honestly rather see a release slip than ship with a storage bug that can leave a machine unbootable. Fedora’s blocker process exists for exactly this, and two weeks is a fair price. Still, it’s worth remembering that the issues that nearly made the cut tell you where to be careful in the first few weeks.
The quiet changes that matter most
The change I find most interesting is the console. Fedora 45 replaces the kernel’s built-in framebuffer console, fbcon, with kmscon, a console that runs in userspace instead. The change owner pitches it as “an enhanced and more secure console,” and in practice that means better Unicode and font rendering, saner keyboard layout handling and less code running inside the kernel itself. Most desktop users only see a virtual terminal when something has gone wrong, so making that screen nicer and safer is a smart, low-drama upgrade.
That pairs with a new DRM Panic frontend. When the kernel panics, Fedora can now send you to a web-based page that explains what the panic data means and helps you file a report in Fedora’s Bugzilla. Anyone who has stared at a frozen screen full of hex knows why that’s welcome.
Security gets real attention, too. RPM now enforces signature checking by default, following the upstream RPM 6.0 default: packages need a valid signature before they install, unless you explicitly override it with --nosignature. That’s the right default in 2026, though people who build and install their own local RPMs will run into it the first time and need to sign their packages or opt out.
Fedora also restricts ptrace for unprivileged users by default. ptrace is the mechanism debuggers use to inspect other processes, and malware can abuse it the same way to read memory from your browser or password manager running under the same account. Under the new default, that kind of snooping on existing processes is blocked. The tradeoff is for developers, and Fedora handled it sensibly: install the debugging tools and a sysctl file flips the old behavior back on system-wide. Separately, the default secrets service on desktops that used GNOME Keyring moves to oo7, a newer implementation written in Rust.
Fedora is also starting a controlled wind-down of the kernel’s crypto userspace API, which upstream has deprecated over security concerns, and it moves packaged RPM repository config files from /etc to /usr. And if you use the NetworkManager-vpnc or NetworkManager-fortisslvpn plugins, they’re being retired starting with this release, so read Fedora’s migration guidance before your work VPN stops connecting on Monday morning.
Stratis, desktops and a big toolchain refresh
The feature Fedora itself put up front is Stratis support in the Anaconda installer. Stratis wraps device-mapper, XFS and LUKS into a simpler storage layer with pooling, thin provisioning, snapshots and encryption. In the graphical installer, custom partitioning can open the Cockpit storage module to build Stratis pools across one or more drives, and automated installs get --type=stratis for autopart plus new stratispool and stratisfs Kickstart commands. It’s a genuinely useful option for home labs and servers, but given that the last-minute blocker involved encrypted Stratis pools, I’d let it settle a bit before trusting it with a machine you need every day.
On the desktop side, Fedora Workstation 45 ships GNOME 51, while the KDE edition gets Plasma 6.8. According to Linuxiac’s rundown, Plasma 6.8 no longer offers native X11 desktop sessions, finishing KDE’s move to Wayland, though X11 apps keep working through XWayland. If you were still holding on to a Plasma X11 session for one stubborn app or a capture workflow, now’s the time to test it.
The Atomic desktops (Silverblue, Kinoite and friends) switch from the old GTK installer to Anaconda’s WebUI and gain remote installation: boot the target machine with inst.webui.remote and finish the install from a browser on another computer over HTTPS with PIN-based authentication. Their ISOs are now built with image-builder. Fedora CoreOS, per Linuxiac, now enables systemd-oomd and zram swap by default.
Developers get the usual Fedora firehose. The approved change list includes GCC 16.2, binutils 2.47, glibc 2.44, gdb 17.2, LLVM 23, Go 1.27, Python 3.15, Perl 5.44, Lua 5.5, RPM 6.1, Podman 6 and Pandas 3. Phoronix also points to improved support for Qualcomm Snapdragon X laptops and the expectation that package builds be reproducible, which is a big deal for supply-chain trust even if you never notice it day to day.
Fedora 45 boots with the Linux 7.2 kernel, and Phoronix notes a Linux 7.3 update should roll out soon. Fedora usually follows new stable kernels within weeks, so features like the Radeon HDMI 2.1 default coming in Linux 7.4 should reach Fedora users a lot sooner than on slower-moving distros. Apple Silicon owners have their own path: Fedora Asahi Remix 45 landed a day early with initial M3 support, though 3D acceleration for M3 GPUs isn’t included yet and will come later through a Mesa update.
Cody’s take
Fedora 45 isn’t a flashy release, and that’s mostly a compliment. Signed packages by default, tighter ptrace rules, a userspace console and reproducible builds are the kind of unglamorous work that makes a desktop OS harder to attack and easier to debug. It’s also why I keep pointing gamers and creators who want a current Linux setup toward Fedora: you get new kernels, new Mesa and new desktops fast without living on a pure rolling release.
The realistic caveats are clear, though. The delay was about real bugs, some of them in the exact areas this release is proudest of. If you’re on Fedora 44, it’s reasonable to wait a week or two for the first round of updates, back up first, and then upgrade with DNF’s system-upgrade. Check your VPN plugin, your local RPM workflow and any leftover X11 habits on Plasma before you jump. Fresh installers can grab images now from the Fedora Project site.
Having spent plenty of nights fixing a broken install instead of gaming, I appreciate a release that spends its energy on making failure less scary. Fedora 45 does that. Just give it a little time to settle.
Featured image: official Fedora Linux 45 release artwork from Fedora Magazine. Image: Fedora Project.
