tagline: Confidence in the Connected World
CIS Logo
HomeResourcesBlog postEnd-of-Support Software Report list

End-of-Support Software Report list

10/1/2016 to 6/30/2017

The importance of updating software before its End-of-Life (EOL) and End-of-Support (EOS) should not be taken lightly or ignored. EOL occurs when the software is retired, although the vendor/manufacture can (and generally does) continue to support the software until the EOS date. EOS occurs when software updates, patches, and other forms of support are no longer offered, resulting in software becoming prone to future security vulnerabilities. Vendors and manufacturers often use these terms interchangeably, although different vendors and manufacturers may have slightly different definitions for EOL and EOS. For this reason, it is important to check with the individual vendor/manufacturer.

Using outdated software and firmware/hardware, either because it’s past its EOS date or due to an ineffective patch management program, puts users at risk in the following ways:

  • Allows for future security vulnerabilities because vulnerabilities are no longer patched after discovery
  • Removes compliance with company or federal policy by utilizing products that are deemed unacceptable for use
  • Decreases performance and productivity because EOS products could be lacking useful features that are being incorporated in up-to-date products
  • Increases support costs by having a need for extended support

While updating software and firmware/hardware before it reaches its EOS will significantly reduce any risks and costs associated with EOS, the process of finding EOS dates and locating all the instances of obsolete products can be a difficult and time consuming task. In order to help alleviate this burden, the Multi-State Information Sharing and Analysis Center (MS-ISAC) has comprised an EOL and EOS software report for software with EOL/EOS dates through the end of June 2017.

Below are EOL and EOS software dates from 10/1/2016 to 6/30/2017 that MS-ISAC is currently aware of:

Adobe EOS Core Support List

Per Adobe, EOS means that Adobe will no longer provide technical support or distribute runtimes, including product and/or security updates, for all derivatives of a product or product version (e.g. localized versions, minor upgrades, operating systems, dot and double-dot releases, and connector products). Click to read more from Adobe.

Product Name Version Build EOS Date

Adobe Campaign / Neolane

6 N/A 10/10/2016

LiveCycle Forms ES3

10.x.x 3/31/2017

LiveCycle Reader Extensions ES3

10.x.x 3/31/2017

LiveCycle Process Management ES3

10.x.x 3/31/2017

LiveCycle Rights Management ES3

10.x.x 3/31/2017

LiveCycle Digital Signatures ES3

10.x.x 3/31/2017

LiveCycle Output ES3

10.x.x 3/31/2017

LiveCycle Designer ES3

10.x.x 3/31/2017

LiveCycle Workbench ES3

10.x.x 3/31/2017

LiveCycle ES3 Connector for
IBM Content Manager

 10.x.x  3/31/2017

LiveCycle ES3 Connector for IBM FileNet

10.x.x 3/31/2017

LiveCycle ES3 Connector for EMC Documentum

10.x.x 3/31/2017

LiveCycle ES3 Connector for Microsoft SharePoint

10.x.x 3/31/2017

LiveCycle Data Services ES3

4.6.x 3/31/2017

LiveCycle Correspondence Management Solution

10.x.x 3/31/2017

Adobe ColdFusion

10.x 3/31/2017

Adobe Experience Manager (CQ)

AEM 6.0 5/31/2017

Adobe Access Core

4 6/21/2017

Adobe Access Professional

 4  6/21/2017

 

Adobe Extended Support List

Product Name Version Build EOS Date

Adobe Connect Pro

7.5 NA 11/30/2016

LiveCycle Forms ES2

9.x.x NA 12/31/2016

LiveCycle Reader Extensions ES2

9.x.x NA 12/31/2016

LiveCycle Process Management ES2

9.x.x NA 12/31/2016

LiveCycle Rights Management ES2

9.x.x NA 12/31/2016

LiveCycle Digital Signatures ES2

9.x.x NA 12/31/2016

LiveCycle Output ES2

9.x.x NA 12/31/2016

LiveCycle Production Print ES2

9.x.x NA 12/31/2016

LiveCycle Mosaic ES2

9.x.x NA 12/31/2016

LiveCycle Business Activity Monitoring ES2

9.x.x NA 12/31/2016

LiveCycle Business Activity Monitoring Extended ES2

9.x.x NA 12/31/2016

LiveCycle Designer ES2

9.x.x NA 12/31/2016

LiveCycle Workbench ES2

9.x.x NA 12/31/2016

LiveCycle Forms for IBM ES2

9.x.x NA 12/31/2016

LiveCycle Forms for FileNet ES2

9.x.x NA  12/31/2016

LiveCycle for Documentum ES2

9.x.x NA 12/31/2016

LiveCycle for SharePoint ES2

9.x.x NA 12/31/2016

LiveCycle for Data Services

3.0.x NA 12/31/2016

LiveCycle Solution Accelerator - Correspondence Management

9.5.x NA 12/31/2016

LiveCycle Solution Accelerator - Interactive Statements

9.5.x NA 12/31/2016

LiveCycle Solution Accelerator - Managed Review and Approval

9.5.x NA 12/31/2016

Adobe ColdFusion

9.x NA 12/31/2016

Adobe CQ

CQ 5.5 2/25/2017

Adobe ColdFusion Builder

1 3/31/2017

Adobe Flash Builder

4 3/31/2017

Adobe InDesign Server

CS5 4/12/2017

Adobe Flash Access

2 6/30/2017

 

Google Android EOL Core & Extended Support List

Per Google, when a device reaches EOL, it means that the product model is considered obsolete and automatic software updates from Google are no longer guaranteed. Click to read more from Google.

Manufacturer OS Product EOL

Samsung

Android Galaxy Tab4 Education 4/1/2017

Asus

Android  Transformer Pad (2014) 5/1/2017

Samsung

Chrome  Chromebook Series 5 550 5/1/2017

 

Apache EOL Core Support List

MS-ISAC does not have information from Apache regarding EOL or EOS dates. As such, MS-ISAC recommends that entities use the most the recent stable versions of the software whenever possible. To verify that you are using the most current version of your Apache software, go to the “Apache Projects” page on their website and select your desired software from the “Apache Projects List.”

Apache Tomcat EOL

Product Name Version EOL Date

Tomcat

6.x 12/31/2016

Click to read more on Apache’s website.

Apple Quicktime 7 EOL

Per Apple, QuickTime 7 for Windows is no longer being supported. MS-ISAC recommends that entities use the most the recent stable versions of software whenever possible. To find the most current version of QuickTime, go to the “Apple QuickTime Downloads” page and select your desired software from the available downloads.

Click to read more from Apple .

Click to read more from US-CERT .

Drupal EOL Core & Extended Support List

MS-ISAC does not have information from Drupal regarding EOL or EOS dates. As such, MS-ISAC recommends that entities use the most recent stable versions of software whenever possible.

Click to read more from Drupal.

Click to read Drupal Core release list.

Google Chome Flash Support

Google will be phasing out Flash support for Chrome by the end of 2016. The only exceptions for Flash usage will be for sites where Flash is the only option. In these instances, users will be asked if they want the Flash content to run.

Click to read more from BBC.

Joomla EOL Core & Extended Support List

MS-ISAC does not have information from Joomla regarding EOL or EOS dates. As such, MS-ISAC recommends that entities use the most recent stable versions of software whenever possible.

Click to read more from Joomla
Click to read about “Downloading older releases” from Joomla

Microsoft EOS Core Support List

Microsoft Lifecycle Policy
Microsoft products reaching EOS in the first half of 2016

Microsoft products reaching EOS in the second half of 2016
Microsoft products reaching EOS in 2017 

Service Packs EOS Date Comment

Microsoft BitLocker Administration and Monitoring 1.0

9/13/2016 This product will be moving into Extended Support in the next 6 months. Extended Support lasts for a minimum of 5 years and includes security updates at no cost, and paid non-security updates and support. Additionally, Microsoft will not accept requests for design changes or new features during the Extended Support phase.

Microsoft Diagnostics and Recovery Toolset 7

10/11/2016 These products will be moving into Extended Support in the next 6 months. Extended Support lasts for a minimum of 5 years and includes security updates at no cost, and paid non-security updates and support. Additionally, Microsoft will not accept requests for design changes or new features during the Extended Support phase.

Windows Embedded POSReady 7

10/11/2016

Windows Thin PC

10/11/2016

Communicator Mobile

10/11/2016

Microsoft Dynamics AX 4.0

10/11/2016

Microsoft System Center Reporting Manager 2006

10/11/2016

Agents for Microsoft Visual Studio 2013

10/11/2016 PER Microsoft:
*NOTE: Products listed without a specific service pack refer to Release to Manufacturing (RTM) or Service Pack 0 (SP0) version. These versions will expire as Service Pack 1 was released 12 or 24 months prior to the support expiration date, based on the Service Pack policy. In order to remain supported, please update the RTM/SP0 to a currently support Service Pack.

Microsoft Advanced Group Policy Management 4.0 Service Pack 2

10/9/2016

Microsoft BitLocker Administration and Monitoring 2.5

10/11/2016

Microsoft Dynamics C5 2012 Service Pack 1

10/11/2016

Microsoft User Experience Visualization 2.1

10/11/2016

Microsoft Visual Studio 2013 Modeling Software Development Kit

10/11/2016

Microsoft Visual Studio 2013 Remote Tools

10/11/2016

Microsoft Visual Studio 2013 Shell (Integrated)

10/11/2016

Microsoft Visual Studio 2013 Shell (Isolated)

10/11/2016

Microsoft Visual Studio 2013 Software Development Kit

10/11/2016

Microsoft Visual Studio Express 2013 for Web

10/11/2016

Microsoft Visual Studio Express 2013 for Windows

10/11/2016

Microsoft Visual Studio Express 2013 for Windows Desktop

10/11/2016

Microsoft Visual Studio Premium 2013

10/11/2016

Microsoft Visual Studio Professional 2013

10/11/2016

Microsoft Visual Studio Team Explorer Everywhere for Team Foundation Server

10/11/2016

Microsoft Visual Studio Team Foundation Server 2013

10/11/2016

Microsoft Visual Studio Team Foundation Server Express 2013

10/11/2016

Microsoft Visual Studio Test Professional 2013

10/11/2016

Microsoft Visual Studio Ultimate 2013

10/11/2016

Team Explorer for Visual Studio 2013

10/11/2016

Visual Studio 2013 Community Edition

10/11/2016

Microsoft SQL Server 2012 Service Pack 2

1/10/2017 PER Microsoft:
*NOTE: Products listed without a specific service pack refer to Release to Manufacturing (RTM) or Service Pack 0 (SP0) version. These versions will expire as Service Pack 1 was released 12 or 24 months prior to the support expiration date, based on the Service Pack policy. In order to remain supported, please update the RTM/SP0 to a currently support Service Pack.

Microsoft Customer Care Framework 2005 .NET 2.0 Edition

1/10/2017

Microsoft Internet Security and Acceleration Server 2006

1/10/2017

Microsoft Voice Command 1.6

1/10/2017

Microsoft BizTalk Adapters for Host Systems

4/11/2017

Microsoft BizTalk FileAct and InterAct Adapters for SWIFT

4/11/2017

Microsoft Dynamics NAV 5.0

4/11/2017

Microsoft Exchange Server 2007

4/11/2017

Microsoft Expression Web

4/11/2017

Microsoft Host Integration Server 2006

4/11/2017

Microsoft Office Communicator Phone Edition

4/11/2017

Microsoft Office Interconnect 2007

4/11/2017

Microsoft Visual Studio 2005 Team Edition for Database Professionals

4/11/2017

Windows Vista

4/11/2017

Microsoft EOS Extended Support List

To find EOS Extended Support, search the “Support Lifecycle Product Database” found here.

Oracle Java EOS Core & Extended Support List

According to the “Oracle Java Archive” page, older versions of the Java Runtime Environment (JRE) and Java Development Kit (JDK) are provided to help developers debug issues on older systems. They are not updated with the latest security patches and are not recommended for use in production. The Oracle Java team recommends that only the latest versions of JDK and JRE should be used. Based on this stance, MS-ISAC recommends that you verify the version you are running is up-to-date and upgrade to the latest version if necessary.

Click to read more from Oracle.

Wordpress EOS Core & Extended Support List

The WordPress Release Archive” page indicates that only their products’ latest versions are safe to use and users should not be using out-of-date versions. According to the website, any version prior to the latest version is not actively maintained. Based on this WordPress statement, MS-ISAC recommends that you verify the latest version of WordPress is being used and update to the current version if necessary.

Please feel free to contact MS-ISAC at soc@msisac.org if you would like additional software vendors added to the list or have further information regarding any of the above listed software.