End of support and end of life
Compare source-published end of support and end of life dates by product and release cycle.
End of Support (EOS) and End of Life (EOL) dates for operating systems, databases, runtimes, web servers, virtualization platforms, network devices, and applications, from endoflife.date. End of Support means active support ends, though security patches usually continue; End of Life means security patches stop, and it is the date that matters most. The two are different, and this page keeps them apart.
What is and is not linked to Common Vulnerabilities and Exposures (CVEs)
A status is shown at the product-and-release-cycle level only; this page never claims that a specific version you run is end of life. Most products here carry an identity verified against the product's own identifier in the source, and only those may be linked to vulnerability records. A display-only tier (Windows Server, several other operating systems, and a number of infrastructure appliances whose identity the source does not assert) is shown for planning, and is never linked to a vulnerability record. Anything else shows no lifecycle status rather than a guessed one.
The crosswalk's product vendors cover 20 of the 7,658 distinct vendors in this tracker's vulnerability corpus (under 1 percent). This counts vendors, not products; most products in the vulnerability table have no lifecycle data.
Lifecycle status board
Every mapped product and release cycle, in three groups: already past End of Life, ending within 12 months, and supported. The nearest End of Life dates also appear on the compliance Calendar.
| Support window | |||||
|---|---|---|---|---|---|
| Past end of life (unsupported)679 releases | |||||
| Alpine Linux | 3.21 | Not reported | End of LifeEnded 5 days ago | ||
| OpenSSL | 3.6 | Not reported | End of LifeEnded 5 days ago | ||
| Citrix Virtual Apps and Desktops | 2503 | End of LifeEnded 8 days ago | |||
| Kubernetes | 1.34 | End of LifeEnded 10 days ago | |||
| OpenSSL | 3.4 | Not reported | End of LifeEnded 15 days ago | ||
| MySQL | 26.7 | End of LifeEnded 17 days ago | |||
| Windows | 10-1607-e-lts | Extended supportEnded 24 days ago | |||
| Windows | 11-24h2-w | End of LifeEnded 24 days ago | |||
| Python | 3.10 | End of LifeEnded 36 days ago | |||
| Cisco IOS XE | 17.9 | End of LifeEnded 37 days ago | |||
| Fortinet FortiOS | 7.2 | End of LifeEnded 37 days ago | |||
| FreeBSD | 15.0 | Not reported | End of LifeEnded 37 days ago | ||
| OpenJDK (Oracle builds) | 26 | Not reported | End of LifeEnded 52 days ago | ||
| macOS | 14 (Sonoma) | Not reported | End of LifeEnded 53 days ago | ||
| OpenSSL | 3.0 | Not reported | End of LifeEnded 2 months ago | ||
| Debian | 11 (Bullseye) | Extended supportEnded 2 months ago | |||
| F5 BIG-IP | 21.0 | End of LifeEnded 3 months ago | |||
| Cisco IOS XE | 17.17 | End of LifeEnded 3 months ago | |||
| Microsoft SharePoint | 2016 | End of LifeEnded 4 months ago | |||
| Microsoft SharePoint | 2019 | End of LifeEnded 4 months ago | |||
| Microsoft SQL Server | 13.0-sp3 (SQL16) | Extended supportEnded 4 months ago | |||
| Microsoft SQL Server | 13.0-sp3-acp (SQL16) | Extended supportEnded 4 months ago | |||
| Ubuntu | 25.10 (Questing Quokka) | End of LifeEnded 4 months ago | |||
| Amazon Linux | 2 | End of LifeEnded 4 months ago | |||
| FreeBSD | 14.3 | Not reported | End of LifeEnded 4 months ago | ||
| Kubernetes | 1.33 | End of LifeEnded 4 months ago | |||
| Citrix Virtual Apps and Desktops | 2411 | End of LifeEnded 5 months ago | |||
| Node.js | 25 | End of LifeEnded 5 months ago | |||
| Fedora | 42 (Adams) | Not reported | End of LifeEnded 5 months ago | ||
| nginx | 1.29 | Not reported | End of LifeEnded 6 months ago | ||
| Windows Server | 23h2-ac | End of LifeEnded 6 months ago | |||
| FreeBSD | 13 | Not reported | End of LifeEnded 6 months ago | ||
| FreeBSD | 13.5 | Not reported | End of LifeEnded 6 months ago | ||
| MySQL | 8.0 | End of LifeEnded 6 months ago | |||
| Node.js | 20 | End of LifeEnded 6 months ago | |||
| openSUSE | 15.6 | Not reported | End of LifeEnded 6 months ago | ||
| MySQL | 9.6 | End of LifeEnded 7 months ago | |||
| nginx | 1.28 | Not reported | End of LifeEnded 7 months ago | ||
| OpenSSL | 3.3 | Not reported | End of LifeEnded 7 months ago | ||
| Alpine Linux | 3.20 | Not reported | End of LifeEnded 7 months ago | ||
| OpenJDK (Oracle builds) | 25 | Not reported | End of LifeEnded 8 months ago | ||
| Android | 13 (Tiramisu) | Not reported | End of LifeEnded 8 months ago | ||
| Kubernetes | 1.32 | End of LifeEnded 8 months ago | |||
| macOS | 10.15 (Catalina) | Not reported | End of LifeEnded 9 months ago | ||
| macOS | 11 (Big Sur) | Not reported | End of LifeEnded 9 months ago | ||
| Apple iOS | 12 | End of LifeEnded 9 months ago | |||
| MySQL | 9.5 | End of LifeEnded 10 months ago | |||
| Ubuntu | 25.04 (Plucky Puffin) | End of LifeEnded 10 months ago | |||
| Cisco IOS XE | 17.16 | End of LifeEnded 10 months ago | |||
| Citrix Virtual Apps and Desktops | 2407 | End of LifeEnded 10 months ago | |||
Operating systems
- WindowsLatest cycle 11-26h2-wSupported
- End of Life
- Countdown
- Windows ServerLatest cycle 2025Supported
- End of Life
- Countdown
- macOSLatest cycle 27Not announced
End of Life: not announced
- UbuntuLatest cycle 26.10Supported
- End of Life
- Countdown
- Red Hat Enterprise LinuxLatest cycle 10Supported
- End of Life
- Countdown
- DebianLatest cycle 13Supported
- End of Life
- Countdown
Infrastructure
The platform products a security team plans lifecycle around: virtualization, runtimes, orchestration, and edge. A product marked display only shows its dates for planning but is never linked to a vulnerability record.
- VMware ESXiLatest cycle 9.1Supported
- End of Life
- Countdown
- OpenJDK (Oracle builds)Latest cycle 27Supported
- End of Life
- Countdown
- .NETLatest cycle 10Supported
- End of Life
- Countdown
- KubernetesLatest cycle 1.37Supported
- End of Life
- Countdown
- nginxLatest cycle 1.31Not announced
End of Life: not announced
- Microsoft SharePointLatest cycle subscriptionNot announcedDisplay only
End of Life: not announced
- Microsoft .NET FrameworkLatest cycle 4.8.1Not announcedDisplay only
End of Life: not announced
- Cisco IOS XELatest cycle 26.1Not announcedDisplay only
End of Life: not announced
- F5 BIG-IPLatest cycle 21.1SupportedDisplay only
- End of Life
- Countdown
- Citrix Virtual Apps and DesktopsLatest cycle 2607SupportedDisplay only
- End of Life
- Countdown
Lifecycle timeline (major operating systems)
Release to End of SupportEnd of Support to End of LifeExtended supportToday
About this data and its limits
Lifecycle dates come from endoflife.date, a community-maintained, best-effort catalog. Products appear here in two tiers. Most are mapped to a canonical vendor and product verified against the product's own identifier in the source, and only those may ever be linked to a Common Vulnerabilities and Exposures (CVE) record. A display-only tier (Windows Server, several other operating systems, and a number of infrastructure appliances whose identity the source does not assert or asserts ambiguously) is shown because its dates matter to planning even though no single verified identifier exists for it; a display-only product's dates appear here, but it is never linked to any CVE record, the vulnerability scorer ignores it entirely, and the CSV download leaves its identity columns blank. A product that fits neither tier shows no lifecycle status here rather than a guessed one. The status of each release cycle is derived from its dates: Supported, End of Support, Extended support, End of Life, or Not announced when the source has not set a date. A status is shown at the product-and-release-cycle level only. This page never claims that a specific version you run is end of life, since that conclusion needs version-level data this page does not carry.
endoflife.date is a community-maintained, best-effort catalog licensed MIT. Its operating system and runtime coverage is dense, but its network-edge and appliance coverage is thinner: several appliances carry no Common Platform Enumeration (CPE) identity, and Ivanti and Citrix NetScaler are not tracked at all. Most products here are mapped to a canonical vendor and product verified against the product's own identifier in the source, and only those may ever be linked to vulnerability records. A display-only tier (Windows Server, several other operating systems, and a number of infrastructure appliances whose identity the source does not assert or asserts ambiguously) is shown because its dates matter to planning even though no single verified identifier exists for it; a display-only product is never linked to any vulnerability record. A product that fits neither tier shows no lifecycle status here rather than a guessed one.
Lifecycle data is from endoflife.date, licensed MIT, maintained by endoflife.date contributors.