End-of-Support Software Report list – Archive
10/1/2016 to 6/30/2017
The importance of updating software before its End-of-Life (EOL) and End-of-Support (EOS) should not be taken lightly or ignored. EOL occurs when the software is retired, although the vendor/manufacture can (and generally does) continue to support the software until the EOS date. EOS occurs when software updates, patches, and other forms of support are no longer offered, resulting in software becoming prone to future security vulnerabilities. Vendors and manufacturers often use these terms interchangeably, although different vendors and manufacturers may have slightly different definitions for EOL and EOS. For this reason, it is important to check with the individual vendor/manufacturer.
Using outdated software and firmware/hardware, either because it’s past its EOS date or due to an ineffective patch management program, puts users at risk in the following ways:
- Allows for future security vulnerabilities because vulnerabilities are no longer patched after discovery
- Removes compliance with company or federal policy by utilizing products that are deemed unacceptable for use
- Decreases performance and productivity because EOS products could be lacking useful features that are being incorporated in up-to-date products
- Increases support costs by having a need for extended support
While updating software and firmware/hardware before it reaches its EOS will significantly reduce any risks and costs associated with EOS, the process of finding EOS dates and locating all the instances of obsolete products can be a difficult and time consuming task. In order to help alleviate this burden, the Multi-State Information Sharing and Analysis Center (MS-ISAC) has comprised an EOL and EOS software report for software with EOL/EOS dates through the end of June 2017.
Below are EOL and EOS software dates from 10/1/2016 to 6/30/2017 that MS-ISAC is currently aware of:
Adobe EOS Core Support List
Per Adobe, EOS means that Adobe will no longer provide technical support or distribute runtimes, including product and/or security updates, for all derivatives of a product or product version (e.g. localized versions, minor upgrades, operating systems, dot and double-dot releases, and connector products). Click to read more from Adobe.
| Product Name | Version | Build | EOS Date |
|---|---|---|---|
|
Adobe Campaign / Neolane |
6 | N/A | 10/10/2016 |
|
LiveCycle Forms ES3 |
10.x.x | 3/31/2017 | |
|
LiveCycle Reader Extensions ES3 |
10.x.x | 3/31/2017 | |
|
LiveCycle Process Management ES3 |
10.x.x | 3/31/2017 | |
|
LiveCycle Rights Management ES3 |
10.x.x | 3/31/2017 | |
|
LiveCycle Digital Signatures ES3 |
10.x.x | 3/31/2017 | |
|
LiveCycle Output ES3 |
10.x.x | 3/31/2017 | |
|
LiveCycle Designer ES3 |
10.x.x | 3/31/2017 | |
|
LiveCycle Workbench ES3 |
10.x.x | 3/31/2017 | |
|
LiveCycle ES3 Connector for |
10.x.x | 3/31/2017 | |
|
LiveCycle ES3 Connector for IBM FileNet |
10.x.x | 3/31/2017 | |
|
LiveCycle ES3 Connector for EMC Documentum |
10.x.x | 3/31/2017 | |
|
LiveCycle ES3 Connector for Microsoft SharePoint |
10.x.x | 3/31/2017 | |
|
LiveCycle Data Services ES3 |
4.6.x | 3/31/2017 | |
|
LiveCycle Correspondence Management Solution |
10.x.x | 3/31/2017 | |
|
Adobe ColdFusion |
10.x | 3/31/2017 | |
|
Adobe Experience Manager (CQ) |
AEM 6.0 | 5/31/2017 | |
|
Adobe Access Core |
4 | 6/21/2017 | |
|
Adobe Access Professional |
4 | 6/21/2017 |
Adobe Extended Support List
| Product Name | Version | Build | EOS Date |
|---|---|---|---|
|
Adobe Connect Pro |
7.5 | NA | 11/30/2016 |
|
LiveCycle Forms ES2 |
9.x.x | NA | 12/31/2016 |
|
LiveCycle Reader Extensions ES2 |
9.x.x | NA | 12/31/2016 |
|
LiveCycle Process Management ES2 |
9.x.x | NA | 12/31/2016 |
|
LiveCycle Rights Management ES2 |
9.x.x | NA | 12/31/2016 |
|
LiveCycle Digital Signatures ES2 |
9.x.x | NA | 12/31/2016 |
|
LiveCycle Output ES2 |
9.x.x | NA | 12/31/2016 |
|
LiveCycle Production Print ES2 |
9.x.x | NA | 12/31/2016 |
|
LiveCycle Mosaic ES2 |
9.x.x | NA | 12/31/2016 |
|
LiveCycle Business Activity Monitoring ES2 |
9.x.x | NA | 12/31/2016 |
|
LiveCycle Business Activity Monitoring Extended ES2 |
9.x.x | NA | 12/31/2016 |
|
LiveCycle Designer ES2 |
9.x.x | NA | 12/31/2016 |
|
LiveCycle Workbench ES2 |
9.x.x | NA | 12/31/2016 |
|
LiveCycle Forms for IBM ES2 |
9.x.x | NA | 12/31/2016 |
|
LiveCycle Forms for FileNet ES2 |
9.x.x | NA | 12/31/2016 |
|
LiveCycle for Documentum ES2 |
9.x.x | NA | 12/31/2016 |
|
LiveCycle for SharePoint ES2 |
9.x.x | NA | 12/31/2016 |
|
LiveCycle for Data Services |
3.0.x | NA | 12/31/2016 |
|
LiveCycle Solution Accelerator – Correspondence Management |
9.5.x | NA | 12/31/2016 |
|
LiveCycle Solution Accelerator – Interactive Statements |
9.5.x | NA | 12/31/2016 |
|
LiveCycle Solution Accelerator – Managed Review and Approval |
9.5.x | NA | 12/31/2016 |
|
Adobe ColdFusion |
9.x | NA | 12/31/2016 |
|
Adobe CQ |
CQ 5.5 | 2/25/2017 | |
|
Adobe ColdFusion Builder |
1 | 3/31/2017 | |
|
Adobe Flash Builder |
4 | 3/31/2017 | |
|
Adobe InDesign Server |
CS5 | 4/12/2017 | |
|
Adobe Flash Access |
2 | 6/30/2017 |
Google Android EOL Core & Extended Support List
Per Google, when a device reaches EOL, it means that the product model is considered obsolete and automatic software updates from Google are no longer guaranteed.
| Manufacturer | OS | Product | EOL |
|---|---|---|---|
|
Samsung |
Android | Galaxy Tab4 Education | 4/1/2017 |
|
Asus |
Android | Transformer Pad (2014) | 5/1/2017 |
|
Samsung |
Chrome | Chromebook Series 5 550 | 5/1/2017 |
Apache EOL Core Support List
MS-ISAC does not have information from Apache regarding EOL or EOS dates. As such, MS-ISAC recommends that entities use the most the recent stable versions of the software whenever possible. To verify that you are using the most current version of your Apache software, go to the “Apache Projects” page on their website and select your desired software from the “Apache Projects List.”
Apache Tomcat EOL
| Product Name | Version | EOL Date |
|---|---|---|
|
Tomcat |
6.x | 12/31/2016 |
Click to read more on Apache’s website.
Apple Quicktime 7 EOL
Per Apple, QuickTime 7 for Windows is no longer being supported. MS-ISAC recommends that entities use the most the recent stable versions of software whenever possible. To find the most current version of QuickTime, go to the “Apple QuickTime Downloads” page and select your desired software from the available downloads.
Click to read more from Apple .
Click to read more from US-CERT .
Drupal EOL Core & Extended Support List
MS-ISAC does not have information from Drupal regarding EOL or EOS dates. As such, MS-ISAC recommends that entities use the most recent stable versions of software whenever possible.
Click to read more from Drupal.
Click to read Drupal Core release list.
Google Chome Flash Support
Google will be phasing out Flash support for Chrome by the end of 2016. The only exceptions for Flash usage will be for sites where Flash is the only option. In these instances, users will be asked if they want the Flash content to run.
Joomla EOL Core & Extended Support List
MS-ISAC does not have information from Joomla regarding EOL or EOS dates. As such, MS-ISAC recommends that entities use the most recent stable versions of software whenever possible.
Click to read more from Joomla
Click to read about “Downloading older releases” from Joomla
Microsoft EOS Core Support List
Microsoft Lifecycle Policy
Microsoft products reaching EOS in the first half of 2016
Microsoft products reaching EOS in the second half of 2016
Microsoft products reaching EOS in 2017
| Service Packs | EOS Date | Comment |
|---|---|---|
|
Microsoft BitLocker Administration and Monitoring 1.0 |
9/13/2016 | This product will be moving into Extended Support in the next 6 months. Extended Support lasts for a minimum of 5 years and includes security updates at no cost, and paid non-security updates and support. Additionally, Microsoft will not accept requests for design changes or new features during the Extended Support phase. |
|
Microsoft Diagnostics and Recovery Toolset 7 |
10/11/2016 | These products will be moving into Extended Support in the next 6 months. Extended Support lasts for a minimum of 5 years and includes security updates at no cost, and paid non-security updates and support. Additionally, Microsoft will not accept requests for design changes or new features during the Extended Support phase. |
|
Windows Embedded POSReady 7 |
10/11/2016 | |
|
Windows Thin PC |
10/11/2016 | |
|
Communicator Mobile |
10/11/2016 | |
|
Microsoft Dynamics AX 4.0 |
10/11/2016 | |
|
Microsoft System Center Reporting Manager 2006 |
10/11/2016 | |
|
Agents for Microsoft Visual Studio 2013 |
10/11/2016 | PER Microsoft: *NOTE: Products listed without a specific service pack refer to Release to Manufacturing (RTM) or Service Pack 0 (SP0) version. These versions will expire as Service Pack 1 was released 12 or 24 months prior to the support expiration date, based on the Service Pack policy. In order to remain supported, please update the RTM/SP0 to a currently support Service Pack. |
|
Microsoft Advanced Group Policy Management 4.0 Service Pack 2 |
10/9/2016 | |
|
Microsoft BitLocker Administration and Monitoring 2.5 |
10/11/2016 | |
|
Microsoft Dynamics C5 2012 Service Pack 1 |
10/11/2016 | |
|
Microsoft User Experience Visualization 2.1 |
10/11/2016 | |
|
Microsoft Visual Studio 2013 Modeling Software Development Kit |
10/11/2016 | |
|
Microsoft Visual Studio 2013 Remote Tools |
10/11/2016 | |
|
Microsoft Visual Studio 2013 Shell (Integrated) |
10/11/2016 | |
|
Microsoft Visual Studio 2013 Shell (Isolated) |
10/11/2016 | |
|
Microsoft Visual Studio 2013 Software Development Kit |
10/11/2016 | |
|
Microsoft Visual Studio Express 2013 for Web |
10/11/2016 | |
|
Microsoft Visual Studio Express 2013 for Windows |
10/11/2016 | |
|
Microsoft Visual Studio Express 2013 for Windows Desktop |
10/11/2016 | |
|
Microsoft Visual Studio Premium 2013 |
10/11/2016 | |
|
Microsoft Visual Studio Professional 2013 |
10/11/2016 | |
|
Microsoft Visual Studio Team Explorer Everywhere for Team Foundation Server |
10/11/2016 | |
|
Microsoft Visual Studio Team Foundation Server 2013 |
10/11/2016 | |
|
Microsoft Visual Studio Team Foundation Server Express 2013 |
10/11/2016 | |
|
Microsoft Visual Studio Test Professional 2013 |
10/11/2016 | |
|
Microsoft Visual Studio Ultimate 2013 |
10/11/2016 | |
|
Team Explorer for Visual Studio 2013 |
10/11/2016 | |
|
Visual Studio 2013 Community Edition |
10/11/2016 | |
|
Microsoft SQL Server 2012 Service Pack 2 |
1/10/2017 | PER Microsoft: *NOTE: Products listed without a specific service pack refer to Release to Manufacturing (RTM) or Service Pack 0 (SP0) version. These versions will expire as Service Pack 1 was released 12 or 24 months prior to the support expiration date, based on the Service Pack policy. In order to remain supported, please update the RTM/SP0 to a currently support Service Pack. |
|
Microsoft Customer Care Framework 2005 .NET 2.0 Edition |
1/10/2017 | |
|
Microsoft Internet Security and Acceleration Server 2006 |
1/10/2017 | |
|
Microsoft Voice Command 1.6 |
1/10/2017 | |
|
Microsoft BizTalk Adapters for Host Systems |
4/11/2017 | |
|
Microsoft BizTalk FileAct and InterAct Adapters for SWIFT |
4/11/2017 | |
|
Microsoft Dynamics NAV 5.0 |
4/11/2017 | |
|
Microsoft Exchange Server 2007 |
4/11/2017 | |
|
Microsoft Expression Web |
4/11/2017 | |
|
Microsoft Host Integration Server 2006 |
4/11/2017 | |
|
Microsoft Office Communicator Phone Edition |
4/11/2017 | |
|
Microsoft Office Interconnect 2007 |
4/11/2017 | |
|
Microsoft Visual Studio 2005 Team Edition for Database Professionals |
4/11/2017 | |
|
Windows Vista |
4/11/2017 |
Microsoft EOS Extended Support List
To find EOS Extended Support, search the “Support Lifecycle Product Database” found here.
Oracle Java EOS Core & Extended Support List
According to the “Oracle Java Archive” page, older versions of the Java Runtime Environment (JRE) and Java Development Kit (JDK) are provided to help developers debug issues on older systems. They are not updated with the latest security patches and are not recommended for use in production. The Oracle Java team recommends that only the latest versions of JDK and JRE should be used. Based on this stance, MS-ISAC recommends that you verify the version you are running is up-to-date and upgrade to the latest version if necessary.
Click to read more from Oracle.
WordPress EOS Core & Extended Support List
The WordPress “Release Archive” page indicates that only their products’ latest versions are safe to use and users should not be using out-of-date versions. According to the website, any version prior to the latest version is not actively maintained. Based on this WordPress statement, MS-ISAC recommends that you verify the latest version of WordPress is being used and update to the current version if necessary.
Please feel free to contact MS-ISAC at [email protected] if you would like additional software vendors added to the list or have further information regarding any of the above listed software.
