EOL Risk Score™

Redmine 3.4

Q: What is the EOL Risk Score for Redmine 3.4?

Redmine 3.4 has an EOL Risk Score™ of 50 out of 100, placing it in the Medium risk band. The score is calculated from four factors: EOL Recency (40/40), Attack Surface (10/30), CISA KEV Exposure (0/20), and Extended Support Availability (0/10).

Q: Is Redmine 3.4 still supported?

Redmine 3.4 is no longer supported — it has passed its end of life date (April 6, 2020). No further security patches will be issued. Upgrade to a supported version or obtain extended lifecycle support.

Q: When does Redmine 3.4 reach end of life?

Redmine 3.4 reached (or will reach) end of life on April 6, 2020. After this date, no security patches or bug fixes are issued by the vendor.

Q: What are the security risks of running Redmine 3.4 after end of life?

After end of life, the vendor's standard support for Redmine 3.4 ends, so newly discovered vulnerabilities may never be fixed unless a paid extended support option covers that version. Auditors ask about it too: PCI DSS requirement 12.3.4, for example, calls for a yearly review of vendor end-of-life announcements with a remediation plan approved by senior management.

Past End of Life — No Security Patches

Medium Risk

EOL: April 6, 2020 — 2406 days past EOL

EOL Recency

40/40

Attack Surface

10/30

Medium

CISA KEV

0/20

Not in KEV

Extended Support

0/10

Available

Get this score via API

GET api.endoflife.ai/v1/score/redmine/3.4

Free API key, emailed instantly →

View full Redmine 3.4 details →

EOL Risk Score™ by endoflife.ai