Software End-of-Life News

EOL Watch · August 29, 2026

Oracle Legacy Middleware End of Life: Discoverer, Endeca, Forms 11g — and Why Oracle Never Says “Dead”

Oracle Discoverer's last patches shipped June 2017. Endeca's between 2018 and 2021. Forms and Reports 11g in 2018. None of them ever got an end-of-life announcement — they slid into indefinite Sustaining Support instead. Every date from Oracle's own Lifetime Support brochure (effective April 13, 2026), what Sustaining Support actually covers, the Forms upgrade path that still exists (Fusion Middleware 14.1, supported to 2033), and the options for estates still running any of it.

EOL Watch · August 28, 2026

Ubuntu End of Life: Every Version's Dates — 22.04, 24.04, 20.04 and the Three Support Clocks

Ubuntu 22.04 LTS standard support ends May 31, 2027; 24.04 runs to May 31, 2029 (ESM to 2034); 20.04 left standard support in May 2025 and is ESM-only to April 2030; 16.04's ESM closed in April 2026 making it fully end of life. Every release's dates across all three support tiers — standard, Ubuntu Pro/ESM, and the Legacy add-on — verified against Canonical's release cycle.

EOL Watch · August 27, 2026

Apache Tomcat Marks Dead Versions "Unknown" — and Your Scanner Reads That as Clean

Apache Tomcat's own security pages state that for end-of-life versions the status of new vulnerabilities defaults to unknown, the pages are never updated, and no announcement is made. Scanners read that silence as a clean bill of health. Shown concretely on the actively exploited CVE-2025-24813, where the entire Tomcat 10.0 line and everything before 8.5 carries status unknown.

EOL Watch · August 26, 2026

Gitea's First KEV Entry: CVE-2026-60004, a Two-Day Federal Deadline, and a Release Policy With Nowhere to Hide

CISA added CVE-2026-60004 - a CVSS 9.8 code-injection flaw in Gitea's diffpatch endpoint - to the KEV catalog on August 25 with an August 28 deadline. Gitea's own advisory puts the affected range at 1.17 through 1.27.0: four years of releases. With no LTS and no backports, the only supported destination is 1.27.1 or later.

EOL Watch · August 25, 2026

WebLogic's Perfect-Score KEV Entry: CVE-2026-21962, a Three-Day Federal Deadline, and the Versions That Will Never Get the Patch

CISA added CVE-2026-21962 - a CVSS 10.0, unauthenticated flaw in Oracle HTTP Server and the WebLogic Server Proxy Plug-in - to the KEV catalog on August 24 with an August 27 deadline. Only WebLogic 12.2.1.4, 14.1.1 and 14.1.2 ever received the January 2026 patch; Oracle says earlier versions are likely affected but untested. And 12.2's own Premier Support cliff lands December 2026.

EOL Watch · August 24, 2026

The QRadar SaaS Shutdown: What Dies August 31, What Is Already Gone, and Why There Is No Extended Support

Palo Alto Networks retires the QRadar SaaS products acquired from IBM: QRadar EDR, X-Force Threat Intelligence, Randori Attack and QRadar Advisor with Watson all reach end of life August 31, 2026 - and Randori Recon, Resilient/SOAR on Cloud and the XDR-package SKUs already shut down April 14. A SaaS end of life is a hard stop: nothing to keep running, nothing to extend.

EOL Watch · August 23, 2026

Azure Retires 20+ Services and APIs This September — Seven Separate Deadlines, One Table

Microsoft’s own 2026 end-of-support page lists more than twenty Azure services, APIs and SDKs shutting down across seven September dates — 13, 14, 15, 17, 19, 21 and 30 September 2026. Azure Virtual Desktop (Classic), Azure Functions 1.x, five Computer Vision API versions, three generations of Service Bus control-plane APIs and more, with Microsoft’s documented migration path for each.

EOL Watch · August 22, 2026

Zimbra End of Life: 8.8.15, 9.0 and 10.0 Get No Fix for Exploited CVE-2026-73570

CISA added Zimbra’s CVE-2026-73570 (unauthenticated OS command injection via the optional SNMP component, CVSS 8.9) to the Known Exploited Vulnerabilities catalog on August 21, 2026 with an August 24 federal deadline. The only fix is Zimbra 10.1.20 (July 20, 2026). Zimbra 8.8.15, 9.0 and 10.0 are past vendor support and received nothing — and the vendor’s own patch-release history shows the backports stopping one line at a time, unannounced: 9.0’s last patch June 2025, 10.0’s last patch November 2025, 10.1.x alone ever since. Verified dates, who has a fix, and what to do by the deadline.

EOL Watch · August 20, 2026

IBM z/OS 2.5 End of Support: September 30, 2026 — the Three-Year Paid Extension, and the Move to 3.1 or 3.2

IBM's lifecycle page puts z/OS 2.5 end of support at September 30, 2026 (GA September 30, 2021; withdrawn from marketing January 29, 2024). z/OS follows the Enhanced policy — five years standard, up to three more paid — so the bridge exists at mainframe prices. The verified dates for 2.3 through 3.2, what the extension covers, the 3.1/3.2 upgrade path and coexistence rule, how to check your release, and the decision framework.

EOL Watch · August 20, 2026

Ansible Automation Platform 2.5: Maintenance Support 1 Ends October 2, 2026 — What Still Gets Fixed After That, and Until When

Red Hat AAP 2.5 leaves Maintenance Support 1 on October 2, 2026 — the last phase with Important-severity security fixes and any bug fixes. Maintenance Support 2 (Critical-only) runs to October 2, 2027. AAP 2.4's final window already closed June 30, 2026; AAP 2.6 (October 1, 2025) is the version to be on. The phase table, verified dates for 2.4–2.6, the 2.5 → 2.6 upgrade path, and the annual cadence to plan around.

EOL Watch · August 20, 2026

Altiris End of Life: The Product Is Now Symantec ITMS Under Broadcom — 8.6 Died June 1, 2026, and Everything Before 8.5 Is Long Gone

'Altiris' lifecycle data lives under Symantec IT Management Suite on Broadcom's portal. Verified there: every version before 8.5 is end of life; ITMS 8.6 and its component suites reached end of support June 1, 2026; the 8.7 line has no announced date; ITMS 8.8 / 8.8.1 is the migration target Broadcom names. The naming history that breaks every search, the dates, and the three ways forward.

EOL Watch · August 20, 2026

IBM Netezza End of Life: The Last Appliance Died April 30, 2023 — No Service Extensions, and the Product Lives On Only as Netezza Performance Server

IBM's lifecycle page for the final Netezza appliance generation (PureData System for Analytics N3001, 'Mako') shows end of support April 30, 2023 — with service extensions explicitly not available. TwinFin and Striper died years earlier on the five-years-from-end-of-marketing rule. The appliances are dead; the product continues as Netezza Performance Server. The verified dates, the third-party maintenance bridge, and the two migration paths.

EOL Watch · August 20, 2026

MLflow 2.x: Actively Exploited (CVE-2026-64849), Fixed Only in 3.15 — and Never Declared End of Life

CISA added MLflow’s CVSS 9.3 SSRF flaw CVE-2026-64849 to the Known Exploited Vulnerabilities catalog on August 19, 2026 with a September 2 federal deadline. GitHub’s advisory records the fix as first patched in 3.15.0 — no 2.x backport exists, and the 2.x line has been silent since 2.22.5 on May 12, 2026 with no end-of-life announcement. The third AI infrastructure tool on KEV in six weeks, after Ray and Langflow. The verified dates, who is exposed, and the upgrade path.

EOL Watch · August 20, 2026

Java’s September 2026 Cliff: Nine Runtime Lines Reach End of Life in One Month — Including Oracle JDK 17 Premier Support

Nine Java runtime lines reach end of life in September 2026: SapMachine 17 (Sep 1), the non-LTS 26 series across six vendors as JDK 27 ships, and — the big one — Oracle JDK 17 Premier Support and Oracle GraalVM 17 on September 30. Every date verified against vendor lifecycle data. The full table, the free escape routes that keep JDK 17 patched into 2027–2029 (Temurin, Corretto, Zulu, Microsoft), and the paid Oracle Extended Support option.

EOL Watch · August 19, 2026

Microsoft Master Data Services End of Life: Removed in SQL Server 2025, Supported Only While SQL Server 2022 Is

Master Data Services (MDS) is removed in SQL Server 2025 and supported only in SQL Server 2022 and earlier — so its end of life is SQL Server 2022's: mainstream support to January 11, 2028, extended support to January 11, 2033. MDS dates by host version (2016 already past extended support), what removed means for upgrades, how to check, and the replacement options.

EOL Watch · August 19, 2026

VMware Perpetual License End of Availability: What Broadcom Ended, What Still Works, and What Happens When Your Support Expires

VMware perpetual licenses are end of availability, not end of life: Broadcom stopped selling them and SnS renewals (announced December 2023, listed January 2024), existing licenses keep running and are supported to the end of their contract — then patch, upgrade and support access stop, except zero-day (CVSS ≥ 9.0) fixes on vSphere 8.x. vSphere 7.0 passed general support on October 2, 2025; 8.0 runs to October 11, 2027. What ended, what you keep, how to check, and the four options.

EOL Watch · August 19, 2026

Drupal 7 End of Life: Support Ended January 5, 2025 — What Stopped, What Still Runs, and the Two Ways Forward

Drupal 7 reached end of life on January 5, 2025 — no more security or compatibility fixes for core or contributed modules. What actually ended, the supported Drupal 10/11 releases and their dates (10.6 and 11.3 to December 16, 2026; 11.4 to July 7, 2027), how to check your version, why 7 → 10/11 is a migration not an update, and the two realistic exits: migrate, or certified extended support while you migrate.

EOL Watch · August 19, 2026

Symfony End of Life: Every Version's Dates — 2.8, 3.4 and 4.4 Are Dead, 5.4 Is Security-Only to 2029, 6.4 and 7.4 Are the LTS Lines

Symfony 2.8 LTS ended November 1, 2019, 3.4 on November 1, 2021, 4.4 on November 21, 2023. Today's LTS lines: 5.4 (security fixes only, to February 28, 2029), 6.4 (bug fixes to November 30, 2026, security to November 30, 2027) and 7.4 (to November 30, 2029); Symfony 8.0 ended July 31, 2026. Every release's dates, the six-month/two-year rule, how to check your version, and the LTS-to-LTS upgrade path.

EOL Watch · August 19, 2026

Two KEV Entries, One Lesson: macOS Ventura Gets No Fix at Any Price, Windows 10 Gets One Only Behind ESU

On August 18, 2026 CISA added two actively exploited flaws to its KEV catalog that are end-of-life stories. CVE-2026-65400 (macOS Screen Sharing authentication bypass) was fixed August 6 only in Tahoe 26.6.1, Sequoia 15.7.9 and Sonoma 14.8.9 — Ventura and older get nothing, and Apple sells no extended support. CVE-2026-33824 (Windows IKE double free, CVSS 9.8) was patched April 2026 including Windows 10 22H2 — but that update is ESU-only, six months after the October 14, 2025 end of support. Who has a fix, who does not, and what to do by the August 21 federal deadline.

EOL Watch · August 19, 2026

vCenter 7.0 and CVE-2026-59310: Actively Exploited, Fixed Only for Extended-Support Contracts — What Broadcom's Advisory Actually Says

CISA added CVE-2026-59310 (CVSS 9.8, path traversal in the vCenter Syslog server, remote code execution) to its KEV catalog on August 18, 2026, deadline August 21. Broadcom's VMSA-2026-0006 fixes it in vCenter 8.0 U3k / U2f and VCF 9.0.2.0100 / 9.1.0.0300 — and for vCenter 7.0 (general support ended October 2, 2025) says only: contact Broadcom Support if you have an extended support contract. What that means for perpetual licences with lapsed SnS, why the 8.x-only zero-day program does not help, and what to do this week.

EOL Watch · August 18, 2026

The Atlassian Double Cliff: Bamboo 10.0 Dies August 21, Jira Software 10.0 Dies August 22

Atlassian's two-year rule retires Bamboo 10.0 on August 21, 2026 and Jira Software 10.0 on August 22 — one day apart, and most Atlassian shops run both. Neither is an LTS. The next LTS on each (Bamboo 10.2, Jira 10.3) has only four months left, so the real landing zones are Bamboo 12.1 and Jira 11.3. Every date, and the third piece of the Data Center set with Confluence and Bitbucket.

EOL Watch · August 17, 2026

NumPy 2.1 End of Life: August 19, 2026 — and the Same Day, Python 3.11 Falls Off NumPy's Floor

NumPy 2.1 reaches end of life on August 19, 2026 under NEP 29's 24-month rule. The same schedule drops Python 3.11 from NumPy's support floor that day (3.12+ / 2.2+ from August 19), even though Python 3.11 itself lives to October 2027. And if you are still on Python 3.10, your last supported NumPy died in June 2025. Two clocks, every date, and what to do.

EOL Watch · August 16, 2026

Traefik 3.6 End of Life: August 16, 2026 — the First Traefik Minor With a Security Tail

Traefik 3.6 reaches end of security support on August 16, 2026. It is the first Traefik minor ever given a security tail — before the v3.6 policy change, the average 3.x minor lived 93 days and died the day its successor shipped. Traefik 3.7 is now the only supported line, and Traefik 2.11 — the last v2 release — has been unpatched since February 1, 2026.

EOL Watch · August 16, 2026

Apache Camel 4.14 Went EOL Nine Days Early — and the Vendor Pages That Would Tell You Are Gone

Apache Camel 4.14 reached end of life on August 11, 2026 — nine days before the August 20 date most trackers still publish — because Camel ends an LTS when the next LTS ships, and 4.22 shipped early. Meanwhile Camel's own support page and LTS policy post have vanished from camel.apache.org. What is actually supported now (4.22 and 4.18), the 5-to-68-day non-LTS treadmill, and how we verified the date.

EOL Watch · August 16, 2026

The Whole Proxmox 8 Era Ends August 31, 2026 — VE, Backup Server, and Mail Gateway Together

Proxmox VE 8, Proxmox Backup Server 3, and Proxmox Mail Gateway 8 all reach end of life on August 31, 2026 — the same day, because all three ride Debian 12's security lifecycle. It is the third time the whole family has retired in lockstep. Every date, the pattern, and the upgrade paths to the 9/4-era.

EOL Watch · August 16, 2026

Bitbucket 9.1 Dies August 27, 2026 — and a Bitbucket Version Dies Every Month Through Year-End

Bitbucket Data Center 9.1 reaches end of support on August 27, 2026, exactly two years after release — and Atlassian's two-year clock retires 9.2 in September, 9.3 in October, and the 9.4 LTS in December. Why the KEV history makes unpatched Bitbucket a proven target, and why 10.2 LTS is the upgrade that skips the treadmill.

EOL Watch · August 16, 2026

containerd 1.7 Ends September 1, 2026 — the Last 1.x Line Under Your Kubernetes Nodes

containerd 1.7, the final 1.x release line, reaches end of life on September 1, 2026 after three and a half years as an LTS. It is the container runtime under most Kubernetes nodes and Docker hosts — and the component almost no inventory lists. What changes, the 1.x to 2.x migration reality, and why 2.3 LTS (April 2028) is the landing zone.

EOL Watch · August 15, 2026

Grafana 12.3 End of Life: August 19, 2026 — and 12.4 Outlives Every Grafana 13

Grafana 12.3 reaches end of life on August 19, 2026 — exactly nine months after release. Grafana's 15-month window only applies to the last minor of a major line, which is why 12.4 (EOL May 24, 2027) outlives both Grafana 13.0 and 13.1. Every date, verified against Grafana's own support policy.

EOL Watch · August 14, 2026

React のサポート期限はいつまで？公式の EOL 日は存在しません【2026年8月版】

React には公式のサポート期限（EOL 日）が存在しません。React 19・18・17・16・15 の公開日・最終リリース日・EOL リスクスコアを一覧で整理し、「期限がない」ことが安心材料ではない理由、React 18 の「凍結」状態の見分け方、CVE-2025-55182 の正確な影響範囲、稟議や保守契約で使える判断材料までを日本語で解説します。

EOL Watch · August 12, 2026

ESXi 6.5, 6.7 & 7.0 CVEs: What Is Unpatched — and What Will Never Be Patched

Five KEV-listed CVEs map onto EOL ESXi versions: CVE-2024-37085 is ransomware-exploited and Broadcom lists ESXi 7.0 as No Patch Planned; 6.5 and 6.7 stopped receiving fixes in 2022 and carried the ESXiArgs wave. Which versions get patches, which never will, and the upgrade-or-isolate decision.

EOL Watch · August 12, 2026

Confluence Server End of Life: Two Years Past Support, Three Exploited CVEs, and No Patch Ever Coming

Confluence Server reached end of life February 15, 2024. Three CISA KEV-listed CVEs — including CVSS 10.0 CVE-2023-22518, mass-ransomed since November 2023 — have fixes only on supported branches. Which branches carry which bugs forever, and what to do about it.

EOL Watch · August 12, 2026

The TeamCity RCE Under Active Exploitation Will Never Be Patched on Nine Version Lines — CVE-2026-63077

CVE-2026-63077, an unauthenticated RCE in JetBrains TeamCity added to CISA KEV on August 5, 2026, is fixed only in 2025.11.7 and 2026.1.3. Nine EOL version lines will never receive the fix. The 30-second version check and the upgrade-or-isolate decision.

EOL Watch · August 12, 2026

The ActiveMQ RCE on CISA's KEV Will Never Be Patched on Five Version Lines — CVE-2026-34197

CVE-2026-34197, the exploited ActiveMQ RCE via the Jolokia JMX-HTTP bridge (effectively unauthenticated on 6.0/6.1), is fixed only in 5.19.4 and 6.2.3 — five EOL lines (5.16–5.18, 6.0, 6.1) will never receive the patch.

EOL Watch · August 12, 2026

The Roundcube RCE on CISA's KEV List Will Never Be Patched on 1.4, 1.3, or 1.2 — CVE-2025-49113

CVE-2025-49113, the KEV-listed deserialization RCE in Roundcube Webmail, is fixed only in 1.5.10 and 1.6.11 — the EOL 1.4, 1.3, and 1.2 lines will never receive a patch, leaving upgrade or decommission as the only fixes.

EOL Watch · August 12, 2026

VMware Cloud Foundation End of Life: 4.x Is Dead, 5.x Ends in 2027, and VCF 9.0 Expires Before 5.2

Every VMware Cloud Foundation 4.x release is already end of life — 4.5, the last of the line, ended May 31, 2025. VCF 5.0 and 5.1 both die June 1, 2027; 5.2 follows October 11, 2027. The version-number trap: VCF 9.0 expires September 17, 2027, before 5.2 — the longest published runway is 9.1, to August 12, 2028. All 16 versions' dates, the documented record of what Broadcom did with Tanzu (legacy SKUs retired May 2024, TKG continuing as vSphere Kubernetes Service inside VCF 9), the CISA KEV exposure of the ESXi 7.0 that VCF 4.x bundles, and the honest exit paths.

EOL Watch · August 12, 2026

What Extended Support Actually Costs: The Cross-Vendor Pricing Reference for Post-EOL Software

The first cross-vendor pricing reference for post-EOL extended support. Microsoft ESU: $61/device doubling yearly ($30 one-time for consumers). AWS: EKS $0.60/cluster-hour (6x), RDS $0.100/vCPU-hour doubling in year three. Ubuntu Pro: $25 desktop / $500 server per year. Oracle's Java 17 fee waiver, and the honest quote-based rows — Red Hat ELS, Oracle Database, SUSE LTSS, CentOS ELS — where no public price exists. Every figure traced to a vendor price page or our verified coverage.

EOL Watch · August 12, 2026

IBM MQ End of Support: Every Date Lands on September 30 — 9.2 Crossed Last Year, 9.3 Is Next, and 9.4 Has No Date Yet

IBM MQ 9.3 end of support is September 30, 2027 (extended support to 2031) — and MQ 9.2's standard support already ended September 30, 2025. Full release dates and end-of-support table for every MQ version from MQSeries 5.2 to MQ 10.0, IBM's LTS vs CD support model (LTS gets 5+ years, CD releases lose fix eligibility in months), and why 9.4's unannounced date follows IBM's 12-month-notice policy.

EOL Watch · August 12, 2026

Palo Alto End of Life Has Two Clocks: Every PAN-OS Software Date, the Hardware Dates People Actually Search For, and Why 11.0 Died Before 10.2

Palo Alto publishes software EOL per PAN-OS release and hardware EOL per appliance, on two different pages. PAN-OS 11.2 dies May 2, 2027 — one day before the older 11.1 — and 10.2 already passed August 27, 2025. The PA-5250 (PA-5200 Series) hits hardware EOL August 31, 2028, capped at PAN-OS 11.2 forever. All 26 versions' dates, six version-order inversions, and the 12 PAN-OS entries in CISA's KEV catalog — six with known ransomware use.

EOL Watch · August 12, 2026

Oracle 19c End of Support Date: December 31, 2029 — a Date That Already Moved Once, and the Trap Waiting in 21c

Oracle Database 19c Premier Support ends December 31, 2029, with Extended Support to December 31, 2032 — dates Oracle extended in November 2024 from the original April 2024/2027 schedule. The 21c trap: the newer release is an Innovation Release that dies July 31, 2027, before 19c itself, with no Extended Support. Every Oracle Database version's Premier and Extended dates, the Sustaining Support fine print, and the 19c-to-23ai/26ai path.

EOL Watch · August 12, 2026

IBM i End of Life: 7.4 Has 49 Days of Standard Support Left — and Whether You Call It AS/400, iSeries, or IBM i, the Clock Is the Same

IBM i 7.4 reaches end of standard support September 30, 2026 — the same day as Oracle JDK 17 Premier and FortiOS 7.2, and the day 7.3's first Service Extension window closes. Every release's dates from 1988's AS/400 to 7.6, the paid Service Extension ladder (7.3 to 2028, 7.4 announced to 2029), and the hardware coupling: Power7 tops out at 7.3, Power8 at 7.4, 7.6 needs Power10.

EOL Watch · August 12, 2026

NetApp ONTAP End of Life: Every Version's Support Dates — and Why the Patch Cliff Comes Two Years Before "End of Support"

NetApp supports each ONTAP release for 3 years of full support — then 2 years of limited support that ships no patches of any kind. ONTAP 9.13.1 crossed the patch cliff June 30, 2026; 9.14.1 has 172 days left; 9.15.1 ends July 31, 2027 and 9.16.1 January 31, 2028. Every version's full and limited support dates, the FAS/AFF hardware coupling, and the upgrade rhythm.

EOL Watch · August 12, 2026

Oracle Solaris End of Life: Sun Died in 2010, the Dates Run to 2037 — and the Real Deadline Is January 1, 2027

Oracle Solaris 11.4 is supported to November 2031 (Premier) and November 2037 (Extended) per Oracle's Lifetime Support Policy — the platform outlived Sun Microsystems by more than a quarter century, maintained as a terminal release via continuous-delivery SRUs (there is no Solaris 12). The real deadline: Solaris 11.3 AND Solaris 10 both lose Extended Support January 1, 2027, then drop to Sustaining Support — indefinite, but no new security fixes ever. Every version's dates, the two live CISA KEV Solaris entries, and the 11.3-to-11.4 in-place update path with its SPARC T4+ hardware gate.

EOL Watch · August 11, 2026

What Is the Latest Android Version? Android 17 — Every Version and Its Support Status

The latest Android version is Android 17 (Cinnamon Bun), released June 16, 2026. Android 14, 15, 16 and 17 still receive Google security patches; Android 13 and older do not. The complete table of all 34 Android versions — codename, API level, release date, support status — and why your phone's support differs from your version's.

EOL Watch · August 11, 2026

Proxmox VE 8 End of Life Is August 31, 2026 — the First Proxmox Deadline Most VMware Refugees Have Ever Faced

Proxmox VE 8 reaches end of life August 31, 2026 — no extended support, no LTS: Proxmox supports each release at least as long as its Debian base has Debian Security Team coverage, and Debian 12 crossed that line July 11, 2026. The in-place 8→9 upgrade (Debian 12 Bookworm to 13 Trixie, pve8to9 checklist), every version's dates, and why the post-Broadcom VMware migration wave makes this the first Proxmox EOL many admins have planned for.

EOL Watch · August 11, 2026

Is RHEL 8.10 / 9.4 / 9.6 / 9.7 Still Supported? The Minor-Version Trap in Red Hat's 10-Year Lifecycle

RHEL 8 is supported until May 31, 2029 — and a RHEL 8.6 box has received zero patches since November 9, 2022 unless it carried EUS. Only the latest minor of each major (8.10, 9.8, 10.2) rides the standard patch stream; even-numbered minors get ~2-year EUS windows, odd minors get nothing. Every 8.x and 9.x minor release — release date, supersession date, EUS end date — hand-verified against Red Hat's lifecycle API.

EOL Watch · August 11, 2026

RHEL 8・RHEL 9 のサポート期限はいつまで？RHEL ライフサイクル完全ガイド【2026年版】

RHEL 8 のサポート期限（メンテナンスサポート終了）は2029年5月31日、RHEL 9 は2032年5月31日。RHEL 7/8/9/10 の GA・フルサポート終了・EOL・ELS の日付を一覧表で整理し、最新マイナーリリースしかパッチを受け取れない「マイナーバージョンの罠」まで解説する日本語版 RHEL ライフサイクル完全ガイド。

EOL Watch · August 11, 2026

Amazon EKS Version End of Life: 14 Months of Standard Support, Then the Bill Is the Notification — Every Version's Dates and the 6x Price

Amazon EKS supports each Kubernetes version for 14 months of standard support, then automatically enrolls clusters in extended support — no opt-in — at $0.60 per cluster per hour instead of $0.10 (~$438/month instead of ~$73 per cluster). After 12 months of extended support, AWS auto-upgrades the control plane to the oldest supported version. EKS 1.33 crossed into extended support July 29, 2026; 1.31's extended support ends November 26, 2026. Every version's dates, verified against AWS's release calendar and pricing page.

EOL Watch · August 11, 2026

MuleSoft's Support Treadmill: Mule 4.4 Has Been Fully Dead Since October — and 4.6 LTS Leaves Standard Support August 31

Mule 4.4 — the runtime the 2021–2023 integration build-out standardized on — lost Extended Support October 8, 2025, yet stays among the most-asked-about versions in our data. Under MuleSoft's Edge/LTS policy, Edge releases live 8–12 months release-to-EOL (4.11 dies October 31, 2026) while LTS carries ~3 years. Why production belongs on 4.9 LTS (EOL February 29, 2028), the CloudHub forced-upgrade rule, and every version's dates.

EOL Watch · August 11, 2026

Nutanix AOS 6.10 End of Life Is October 31, 2026 — the Last LTS Exits, and Its Maintenance Already Ended in January

Nutanix AOS 6.10 reaches End of Support Life October 31, 2026 — but its End of Maintenance already passed January 31, 2026, so the release has run on troubleshooting support with security fixes only for over six months. 6.10 is the last AOS release flagged LTS; since AOS 7.0 every release runs a unified ~24-month clock (15 months maintenance + 9 months troubleshooting). Every AOS version's dates and the honest 7.3 vs 7.5 vs 7.6 landing comparison.

EOL Watch · August 11, 2026

Zabbix End of Life: 7.4 Dies September 30, 6.0 LTS in February 2027 — Which Channel You Installed Decides Whether You Get Five Years or One

Zabbix 7.4 reaches end of life September 30, 2026 — 50 days out. Zabbix 6.0 LTS gets critical fixes only until February 28, 2027, and Zabbix 5.0 has been dead since May 31, 2025. The LTS-vs-standard cadence trap — 7.2 shipped December 2024 and died 12 months later while 6.0 LTS from 2022 runs into 2027 — every version's dates, the CISA KEV record for Zabbix Frontend, and the 7.0 LTS upgrade path (supported to June 30, 2029).

EOL Watch · August 11, 2026

Atlassian's Two-Year Treadmill: Every Jira and Confluence Data Center Version Dies Two Years After Its Own Release — and the Server Ghost Fleet Keeps Getting Ransomed

Atlassian supports each Jira and Confluence Data Center release for exactly two years from its own release date — Jira 10.0 dies August 22, 2026, Confluence 9.0 already died July 30, 2026. Server products lost all support February 15, 2024, and three Confluence CVEs sit in CISA's KEV catalog with known ransomware use, permanently unpatchable on the EOL versions attackers find them on. Both full version tables, the LTS cadence, and the Data Center vs Cloud fork.

EOL Watch · August 11, 2026

IBM AIX End of Life: "We Run 7.3" Is Not a Support Status — the Technology Level Clock, and the November 30 Deadline

AIX support expires per Technology Level, not per release: each TL gets fixes for 3 years per IBM's published policy. AIX 7.3 TL2 reaches End of Fix Support November 30, 2026, while TL3 runs to December 2027 and TL4 to December 2028. The AIX 7.2 TL5 anomaly (EoFS still to be determined), the 7.1 Service Extension precedent, and every Technology Level's dates verified against IBM's lifecycle page.

EOL Watch · August 10, 2026

OpenShift 4.18 Maintenance Ends August 25, 2026 — Whether Patches Continue Depends on Your Subscription Tier

Red Hat OpenShift 4.18 exits maintenance support August 25, 2026. Patches don't stop for everyone: EUS continues to February 25, 2027 — included with Premium subscriptions, a paid add-on on Standard — with Term 2 to February 25, 2028. The even/odd EUS rhythm, why 4.19 is a four-month landing with no safety net (maintenance ends December 17, 2026), and the honest 4.20/4.21/4.22 comparison.

EOL Watch · August 10, 2026

Java 17's September 30, 2026 Deadline Is Oracle's, Not Java's — What Ends, What Already Ended, and Every Distribution's Real Date

September 30, 2026 ends Oracle Premier Support for JDK 17 — not free updates (Oracle's NFTC window closed September 2024) and not Java 17 itself. Oracle's roadmap waives the Extended Support fee through September 2029, and the cross-vendor table runs later everywhere: Temurin to Oct 2027, Microsoft and Red Hat builds to 2027, Corretto to Oct 2029, Zulu to Sep 2029.

EOL Watch · August 10, 2026

GitLab 19.0 Stops Receiving Security Patches on August 20 — and GitLab's Whole Support Window Is 91 Days Wide

GitLab 19.0 leaves the security-patch window August 20, 2026 — 91 days after it shipped. GitLab patches only the current monthly release and the two before it, so "we upgraded recently" and "we're supported" are different claims: 18.11 already expired July 16, and 19.1 follows September 17. The rolling three-release window, the live CISA KEV record (four GitLab CVEs, two added in 2026), and why required upgrade stops make waiting compound.

EOL Watch · August 10, 2026

FortiOS 7.2 End of Support Is September 30, 2026 — and FortiOS 7.0 Already Showed What Comes After

FortiOS 7.2 reaches End of Support September 30, 2026 — the end of even critical fixes, on a train that has been critical-fixes-only since engineering support ended March 31, 2025. FortiOS 7.0 crossed the same line last September; within ten months, CVE-2025-68686 was added to CISA's KEV catalog, affecting every 7.0 release, with the fix shipped only to supported trains. Every FortiOS version's dates and the 7.4 / 7.6 / 8.0 decision.

EOL Watch · August 10, 2026

EOL 2026, the Mid-Year Report: The Year the Dates Got Dangerous — and Stopped Holding Still

The biggest end-of-life surprises of 2026 so far, every claim from a primary source: one in six vulnerabilities CISA confirmed as actively exploited this year is three-plus years old, FortiOS 7.0 became permanently unpatchable ten months after EOL, SharePoint's last patch ever fixed a flaw already under attack, Microsoft quietly moved the Windows 10 consumer ESU wall a year via a blog editor's note, AWS edited its Lambda dates in place, and the EU CRA's exploited-vulnerability reporting regime starts September 11.

EOL Watch · August 7, 2026

The Assistants API Dies August 26 — on Azure and OpenAI Both. What Breaks, and What Doesn’t Migrate

Both Microsoft and OpenAI retire the Assistants API on August 26, 2026 — Azure moves to Foundry Agents, OpenAI to the Responses + Conversations APIs. The migration tooling moves your code but not your data: past threads, runs, and messages don’t come across.

EOL Watch · August 7, 2026

Every Jenkins LTS Except the Newest Is Now Permanently Vulnerable — CVE-2026-70426

CVE-2026-70426, a critical deserialization bypass allowing remote code execution on the Jenkins controller, is fixed only in 2.576 and LTS 2.568.2. Under Jenkins’s rolling-LTS policy, every older LTS line — 2.555 and back — will never receive this fix.

EOL Watch · August 5, 2026

Quarkus Authorization Bypass (CVE-2026-39852): The Fix That 50+ EOL Versions Will Never Get

A CVSS 8.2 authorization bypass in Quarkus is fixed in current releases — but 55 of the 58 Quarkus release lines we track are past end of life, and the entire 2.x family will never see the patch. Which versions are fixed, which are stranded, and the real options for each.

EOL Watch · August 4, 2026

Is Your MSP Billing You to Patch Software That Has No Patches?

CISA says attackers are exploiting N-able N-central right now — and legacy consoles can't take the fix until they migrate to a supported version first. The 20-minute audit that tells you what your MSP's patching actually covers, including the console doing the patching.

EOL Watch · August 3, 2026

OpenEoX: Big Tech Is Standardizing Machine-Readable EOL Data — We Read the Draft and Filed Comments

Cisco, Microsoft, Oracle, Red Hat, IBM — with CISA and the NSA at the table — are writing OpenEoX, the OASIS standard for machine-readable end-of-life data. Public comment closes August 13. What the draft gets right, what it misses, and the comments endoflife.ai filed.

EOL Watch · August 2, 2026

Debian 11 Has 29 Days of Patches Left — and Bullseye Runs the Boxes Nobody Remembers

Debian 11 (Bullseye) LTS ends August 31, 2026 — after that, no free security updates at all; only paid Extended LTS (Freexian, listed through June 30, 2031) continues. Why five-year-old Bullseye installs are the forgotten ones — appliances, CI runners, docker FROM lines — the release-to-wall timeline, the Debian 12 wrinkle (already past standard support), and the find-your-bullseye checklist.

EOL Watch · August 1, 2026

AWS Quietly Moved Lambda's Runtime Cutoffs to 2027. The Security Clock Didn't Move.

AWS pushed the operational blocks for its entire old-runtime cohort — Node.js 16/18/20, Python 3.8/3.9, Ruby 3.2, .NET 6 and provided.al2 — to February 1, 2027 (block create) and March 3, 2027 (block update), so most published schedules are now wrong in both directions. What didn't move: nodejs20.x stopped receiving security patches April 30, 2026. The verified three-stage table and the upgrade path to nodejs22.x/24.x.

EOL Watch · July 31, 2026

Nuxt 3 End of Life: EOL Date, Risk, and Migration to Nuxt 4

Nuxt 3 reached end of life on July 31, 2026 after a six-month extension. Nuxt 3.21.10 was the final release. The EOL Risk Score, what stops shipping (including Nitro and h3), why Nuxt 4 has no fixed EOL date, and extended-support options.

EOL Watch · July 30, 2026

AWS Starts Charging for MySQL 8.0 on August 1. Here's What It Costs.

Amazon RDS for MySQL 8.0 reaches end of standard support July 31, 2026, and RDS Extended Support charges begin the next day. Enrollment is automatic unless it was explicitly disabled at instance creation. The per-vCPU-hour rates, the Multi-AZ multiplier, the year-three doubling on August 1, 2028, and the only two ways to stop the charge.

EOL Watch · July 29, 2026

The First AI-Run Ransomware Attack Used Zero Zero-Days

JADEPUFFER is the first ransomware intrusion documented as run end-to-end by an autonomous LLM agent. It needed no novel exploit: it entered through a Langflow flaw patched in March 2025, walked past a storage service still using its installation-default password, and authenticated to Nacos with a signing key published in 2020. What that means for anyone still planning to upgrade next quarter.

EOL Watch · July 28, 2026

Exploited at CVSS 10.0 — and the Vendor Never Checked Whether EOL Versions Are Affected

Arista's advisory for the actively exploited VeloCloud Orchestrator flaw (CVE-2026-16812, CVSS 10.0) contains one line most readers skip: "End of support software versions have not been assessed." What that means if you run an older VCO, the July 30 federal deadline, and why unsupported software gets silence instead of answers.

EOL Watch · July 28, 2026

IBM End-of-Life Dates: The Complete Enterprise Matrix

Every IBM enterprise end-of-support date in one place: z/OS 2.5 and IBM i 7.4 both die September 30, 2026, Db2 11.5 follows April 30, 2027, and AIX 7.3 TLs roll off from November 2026. The full matrix, IBM's fiscal-quarter EOS rhythm, the Power8 trap, and what a Service Extension really costs.

EOL Watch · July 28, 2026

RHEL 10 End of Life: Full Support to 2030, Maintenance to 2035 — Every Phase Dated

RHEL 10 (released May 20, 2025): full support ends May 31, 2030, maintenance ends May 31, 2035, ELS beyond. Every RHEL version's three lifecycle phases in one table, and the nearer deadline most teams miss — RHEL 9 full support ends May 31, 2027.

EOL Watch · July 28, 2026

CentOS to RHEL: Version Mapping, Convert2RHEL, and When It's the Wrong Move

convert2rhel supports CentOS Linux 7.9 and 8.5 (and AlmaLinux/Rocky/Oracle Linux) — but NOT CentOS Stream. Which version lands where, the underrated CentOS 7 → RHEL 7 ELS play, and the cases where conversion is the wrong move.

EOL Watch · July 27, 2026

CISA's 2026 Directives, Plainly: Patch by Risk (BOD 26-04) and Get EOL Off the Edge (BOD 26-02)

CISA now mandates risk-based patching (BOD 26-04: 3-day deadlines for exposed+exploited+automatable+total-control) and eviction of end-of-support edge devices (BOD 26-02). What the directives require, and why EOL status is the fifth risk variable.

EOL Watch · July 25, 2026

Oracle Shipped 1,449 Patches. On Out-of-Support Versions, It Didn't Even Look.

Oracle's July 2026 Critical Patch Update is its largest ever — 1,449 security patches, roughly 1,235 unique CVEs. Oracle's own advisory says releases outside Premier or Extended Support are not tested for those vulnerabilities, and are likely affected anyway. Why an empty advisory row is not a clean bill of health.

EOL Watch · July 25, 2026

OpenSSL 3.0 End of Life: September 7, 2026 — What Actually Breaks, and What Doesn't

OpenSSL 3.0 dies September 7, 2026 — four days before EU CRA reporting begins. Who is actually exposed (bundled copies, not distro packages), the autumn EOL pile-up, and why 3.0→3.5 LTS is easier than feared.

EOL Watch · July 25, 2026

Java End-of-Life Dates by Vendor: Why "When Does Java 17 Die?" Has Eight Different Answers

There is no single Java EOL date. Oracle JDK 17 Premier Support ends September 30, 2026 (Extended Support fee waived to September 2029), Oracle JDK 21's free-use updates end the same month, Red Hat's OpenJDK 8 ends November 30, 2026 — while Temurin, Corretto, Zulu, Microsoft and IBM carry the same versions free to 2027–2032. Every LTS (8, 11, 17, 21, 25) across eight distributions, the Oracle licensing layer, how to identify your vendor, and what to do.

EOL Watch · July 24, 2026

The Next SharePoint 9.8 Arrived in Eight Days — CVE-2026-50522 Is Now Under Attack

CVE-2026-50522, a CVSS 9.8 SharePoint remote code execution flaw, went from public proof-of-concept to active exploitation and onto CISA's Known Exploited Vulnerabilities list on July 22, 2026. It was fixed in the July 14 updates — the last patch SharePoint 2016 and 2019 will ever receive. Federal deadline: July 25.

EOL Watch · July 23, 2026

Debian 11 End of Life: The August 31 LTS Cutoff, and What "End" Actually Means

Debian 11 Bullseye's LTS ends August 31, 2026. The three support tiers explained (standard, LTS, paid ELTS), why upgrading to 12 buys less than it sounds, and the container FROM-line catch.

EOL Watch · July 21, 2026

SharePoint's Last Patch Ever Fixed a Flaw Already Under Attack — and It Shipped on the Day Support Ended

On July 14, 2026 SharePoint Server 2016 and 2019 reached end of support — the same day Microsoft patched CVE-2026-58644, a CVSS 9.8 remote code execution flaw already exploited in the wild. Two days later CISA gave federal agencies three days to fix it. There is no ESU program for SharePoint, so that update was the last these versions will ever get.

EOL Watch · July 21, 2026

AWS Is Quietly Retiring 20+ Services. The Door Closes July 30. Here's the Full List.

AWS's June 30 announcement is its largest coordinated service retirement ever: ~20 services including Kendra, Q Business and Bedrock Agents Classic close to new customers July 30, 2026; WorkSpaces PCoIP and four others shut down June 2027; two are already gone. The full plain-English list with AWS's recommended migration targets.

EOL Watch · July 21, 2026

EOL Dates Drift: What We Found Cross-Checking 54 Products Against Their Vendors

Original research: we cross-checked 54 products against official vendor lifecycle documentation. 33 verified exactly, 12 dates corrected, 7 products have no vendor-published dates at all — and all six upstream correction PRs were merged by endoflife.date's maintainers on July 21, 2026. A field guide to how EOL dates drift.

EOL Watch · July 20, 2026

Gold Eagle Can't Patch What Nobody Maintains: The EOL Hole in the White House's New Vulnerability Pipeline

The White House's Gold Eagle clearinghouse launched July 14 to coordinate AI-discovered vulnerabilities at machine speed — 35,364 CVEs landed in H1 2026 alone. But a remediation pipeline needs somewhere to send the fix, and for end-of-life software there is no somewhere.

EOL Watch · July 17, 2026

The EU Cyber Resilience Act Has an EOL Problem — and the Clock Started in 2024

The CRA's vulnerability reporting obligations begin September 11, 2026 — over a year before the main obligations everyone plans around. Why end-of-life components inside shipped products just became a regulatory liability, and the compliance-ready lifecycle process.

EOL Watch · July 15, 2026

SQL Server 2016 End of Life: What Ended July 14, 2026 & the ESU Runway to 2029

SQL Server 2016 extended support ended July 14, 2026. What stopped, the three-year ESU runway to July 17, 2029, exactly which editions get nothing, the Azure Arc / Software Assurance purchase mechanics, and every migration path.

EOL Watch · July 15, 2026

Windows Server 2012 & 2012 R2 End of Life: The Final ESU Deadline Is October 13, 2026

Windows Server 2012/2012 R2 reached end of life October 10, 2023, and the last ESU year ends October 13, 2026 — on-premises and on Azure alike. Every verified date, the ESU track table, and the 2019/2022/2025 migration decision.

EOL Watch · July 15, 2026

VMware ESXi & vSphere End of Life in the Broadcom Era: Every Support Date

vSphere 7.x general support ended October 2, 2025, perpetual licenses are gone, and every ESXi version now runs on a subscription clock. What actually expires and when, what end-of-general-support means, and every realistic path forward.

EOL Watch · July 15, 2026

Exchange Server 2016 & 2019: Every Deadline Has Now Passed

Exchange 2016 and 2019 ended extended support October 14, 2025, and the last ESU window closes in 2026 with Microsoft stating no further extensions. What still runs, what it risks, and the two realistic paths: Subscription Edition or Microsoft 365.

EOL Watch · July 15, 2026

.NET 8 and .NET 9 Both Die November 10, 2026 — The Double Cutoff

.NET 8 (LTS) and .NET 9 (STS) reach end of support on the same day: November 10, 2026. The support-model math behind the collision, what ends, and why .NET 10 is the only forward target.

EOL Watch · July 14, 2026

SharePoint 2016 & 2019 End of Life: The July 14 Double Cutoff (and SQL Server 2016 Joins Them)

On July 14, 2026, SharePoint Server 2016, SharePoint Server 2019, and SQL Server 2016 all reached Microsoft end of support on the same day. What stops, why the double SharePoint cutoff is unusual, the SQL Server ESU terms, and every path forward.

EOL Watch · July 11, 2026

Debian 12 Is EOL as of Today (July 11, 2026) — Your Actual Situation

Debian 12 Bookworm regular security support ended July 11, 2026. What stops today, what Debian LTS still covers (and its coverage trap), the Debian 11 double-deadline, and three paths forward.

EOL Watch · July 11, 2026

The June 30 Spring Wave: Boot 3.5, Framework 6.2, Security 6.5 & Cloud All EOL

On June 30, 2026 open-source support ended for Spring Boot 3.5, Spring Framework 6.2, Spring Security 6.5 and Spring Cloud 2025.0 simultaneously — and 3.5 was the last 3.x release. Ranked options for teams on 3.x.

EOL Watch · May 20, 2026

Debian 12 EOL July 11, 2026 — What Every Sysadmin Must Do Now

Debian 12 Bookworm reaches end of life July 11, 2026. This is your complete action guide: upgrade paths, extended support options, and the CVE risk of staying on Debian 12 past EOL.

EOL Watch · February 20, 2026

Windows 10 End of Life: October 14, 2025 — ESU Ends October 13, 2026 for Consumers, 2028 for Business

Windows 10 22H2 reached end of support October 14, 2025. ESU year 1 (and all consumer ESU) ends October 13, 2026 — the same day Windows 11 24H2 Home/Pro ends; commercial ESU runs to October 10, 2028 at US$61/$122/$244 per device. LTSC 2021 to January 2027, LTSC 2019 to January 2029. The migration guide, the ESU table, and how to tell which build you are on.

EOL Watch · January 5, 2026

The 2026 EOL Calendar: Every End-of-Life Date Left This Year

244 dated end-of-support events between August and December 2026: OpenSSL 3.0, Oracle JDK 17 Premier, Windows Server 2012 final ESU, Python 3.10, .NET 8/9, PostgreSQL 14, PHP 8.2 — month by month, every row linked and risk-scored.