Topic
The point at which a maintainer stops shipping fixes for a release branch, and the migration planning that deadline imposes on operators.
Python shipped 3.10.22 as the final release of the 3.10 series, with eight CVE fixes and no security updates after it. Any flaw reported from here on stays open on 3.10, so teams still running it have to move to a series that is still patched.
Reality
OpenSSL patched 14 flaws, led by CVE-2026-84782, a CVSS 8.2 DTLS handshake bug that lets an unauthenticated remote peer pull fragments of heap memory. Only software that speaks DTLS is exposed, so VPN, VoIP and IoT products go first in the patch queue.
Perspective Coverage
4 publishersReality
Google's enterprise support page confirms ChromeOS updates through 2034 and says many of its newest Chromebooks can move to Googlebook OS. Google has not published which models qualify, so fleet refresh plans still have to run on each device's own update date.
Perspective Coverage
8 publishersReality
Magento Open Source stopped patching 2.4.6 on 11 August 2026, and about seven of the paid edition's twelve extra months fall after PHP 8.2 stops getting security fixes. The licence buys planning time.
Reality
Calendar, People and Files stop working on December 16, 2026, and Microsoft has already stopped shipping them, leaving a removal job on fleets that took the apps automatically at the end of 2025.
Reality
Astronomer's State of Apache Airflow 2026 puts 5,818 practitioners behind two migration numbers measured on different denominators. Recomputed on one base, about 62 percent are planning a move they have not started.
Reality