php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

OpenJDK 11 End of Life:...

Key Takeaways OpenJDK 11 free security patches ended in late 2024 – if you haven’t arranged extended support, every CVE since then is sitting unpatched in your runtime. Your actual...

PHP 8.3 End of Life:...

Key Takeaways PHP 8.3 reaches end of life on December 31, 2027, after which it receives no security updates or official support. Running PHP 8.3 after EOL exposes your applications...

.NET 7 End of Life:...

Key Takeaways .NET 7 is no longer supported — migrating to a supported version like .NET 8 LTS is the best path forward. Running unsupported .NET versions exposes your applications...

.NET 8 End of Life:...

Key Takeaways .NET 8 end of life is November 10, 2026 – after this date, Microsoft issues no further security patches or bug fixes. EOL means real risk: unpatched vulnerabilities,...

Node.js End-of-Life: Dates, Risks &...

Key Takeaways Node.js follows a predictable LTS lifecycle of about 30 months. End-of-life Node.js versions expose systems to unpatched CVEs, compliance failures, and dependency breakage. The safest path is to...

Ubuntu 16.04 End of Life...

Key Takeaways Ubuntu 16.04, with the code name “Xenial Xerus”, reached the end of its supported lifecycle on April 30, 2021. Many systems still run the 16.04 version because upgrades...

EOL Software: Risks, Examples &...

Key Takeaways Many businesses continue using software past its end-of-life date, often without realizing the risks. Unsupported software exposes systems to cyberattacks, compliance failures, and operational downtime. In this article,...

PostgreSQL 14 End of Life:...

Key Takeaways Each major PostgreSQL version receives approximately five years of community support after its initial release. PostgreSQL 14 will reach the end of its supported lifecycle on 12 November...

Addressing Tomcat Vulnerabilities in End-of-Life...

Apache Tomcat is a widely used open-source web server and servlet container, but like any software, it is not immune to vulnerabilities. Canonical has released security updates to address multiple...

Ubuntu Fixes Two OpenVPN...

Two vulnerabilities were discovered in openvpn, a virtual private network software which could keep the closing session active or result in denial of service. Canonical released security updates to address...

Ubuntu 23.10 Reaches End of...

Ubuntu 23.10, codenamed “Mantic Minotaur,” was released on October 12, 2023, nearly nine months ago. Since it is an interim release, its support period is now approaching with the end...