CIS CYBER ALERT

DATE ISSUED:
01/06/2016

SUBJECT:
End of Life Reminders

End of Life (EOL) notices are provided when companies announce that they will no longer provide security updates, hot fixes, or technical support for select software or software versions. This information is provided here, as the failure to properly upgrade EOL software in a timely manner may potentially subject the organization to a higher level of risk, thus increasing the potential for compromise. MS-ISAC recommends organizations inventory their systems to determine if this software is still in use, and if so, if it is connected to the Internet. A proper migration plan should be developed to ensure the software is upgraded to a supported product.

 

  • Microsoft will discontinue support on January 12, 2016, for versions of Internet Explorer prior to version 11 and for versions 4, 4.5, and 4.5.1 of the .NET Framework. 
  • Microsoft will discontinue extended support for SQL Server 2005 on April 12, 2016. (Of note, multiple versions of .NET can be installed on a single machine.)

 

RECOMMENDATIONS:

 

MS-ISAC recommends organizations inventory their software to determine if older versions of the identified software are currently running on systems and develop a proper migration plan to ensure software is upgraded appropriately. 

  

REFERENCES:

 

Internet Explorer:

https://www.microsoft.com/en-us/WindowsForBusiness/End-of-IE-support

 

.NET Framework:

http://blogs.msdn.com/b/dotnet/archive/2015/12/09/support-ending-for-the-net-framework-4-4-5-and-4-5-1.aspx 

 

SQL Server 2005:

https://support.microsoft.com/en-us/lifecycle?p1=2855