Operations
Current software versions: servers and workstations
Supported versions of operating systems, web servers, languages, databases, development tools and workstation software as of 31 October 2026, with notes on reading version numbers and checking for updates.
This is an overview for a typical web stack: a Linux server, Apache or nginx, PHP and Bitrix, a database, a cache, Node.js and Python for supporting tasks, GitLab and Docker for delivery, plus the workstations of developers and managers. The data was collected on 31 October 2026. Versions change every week, so it is worth opening the source again before an upgrade.
The tables do not replace a check of a specific server. They help you see quickly where you are: on a supported branch, on a branch that is nearing its end date, or already past it.
Supported branches and latest releases
This overview is refreshed automatically from endoflife.date. It lists supported branches with the latest release in each; a few end-of-life branches are kept where they are still common on servers.
The data has not been refreshed for more than two days. Check the source before making a decision.
Server operating systems
- released 2026-05-29supported until 2035-05-31
- released 2026-05-28supported until 2032-05-31
- released 2026-05-26supported until 2035-05-31
- released 2026-05-26supported until 2032-05-31
- released 2026-05-20supported until 2035-05-31
- released 2026-05-20supported until 2032-05-31
- 10supportedsupported until 2030-05-31
- 9supportedsupported until 2027-05-31
- released 2020-11-12ended 2024-06-30
- released 2026-09-12supported until 2030-06-30
- released 2026-07-11supported until 2028-06-30
- released 2026-08-27supported until 2031-05-29
- released 2026-09-10supported until 2029-05-31
- released 2024-09-12supported until 2027-06-01
Web servers and languages
- released 2026-10-01
- released 2026-10-21
- released 2026-10-14
- released 2026-10-21supported until 2029-12-31
- released 2026-10-21supported until 2028-12-31
- released 2026-10-21supported until 2027-12-31
- released 2026-10-21supported until 2026-12-31
- released 2025-12-18ended 2025-12-31
- released 2026-10-28supported until 2029-04-30
- released 2026-10-28supported until 2028-04-30
- released 2026-10-21supported until 2027-04-30
- released 2026-10-25supported until 2031-10-31
- released 2026-10-25supported until 2030-10-31
- released 2026-10-25supported until 2029-10-31
- released 2026-10-25supported until 2028-10-31
- released 2026-10-25supported until 2027-10-31
- released 2026-08-27
- released 2026-10-23supported until 2027-11-23
- released 2026-09-29supported until 2027-05-14
- released 2026-09-29supported until 2026-11-01
Databases, cache and search
- released 2026-10-20
- released 2026-10-20supported until 2034-04-30
- released 2026-09-30supported until 2032-04-30
- released 2026-04-07ended 2026-04-30
- released 2026-09-14supported until 2026-12-31
- released 2026-08-24supported until 2029-06-12
- released 2026-08-24supported until 2028-06-04
- released 2026-08-24supported until 2029-05-29
- released 2026-08-11supported until 2030-11-14
- released 2026-08-10supported until 2029-11-08
- released 2026-08-10supported until 2028-11-09
- released 2026-08-10supported until 2027-11-11
- released 2026-08-10supported until 2026-11-12
- released 2026-10-26
- released 2026-10-26
- released 2026-10-26
- released 2026-10-26supported until 2031-05-19
- released 2026-10-26supported until 2028-10-21
- released 2026-10-26supported until 2030-03-31
- released 2026-07-09
- released 2026-09-29
- released 2026-10-20
- released 2026-10-06
- released 2026-10-06
- released 2026-10-06supported until 2027-07-15
Development and delivery
- released 2026-09-28
- released 2026-10-28supported until 2027-01-21
- released 2026-10-28supported until 2026-12-17
- released 2026-10-27supported until 2026-11-19
- released 2026-10-28supported until 2027-01-21
- released 2026-10-20
Workstations
- supported until 2028-10-10
- supported until 2028-03-14
- supported until 2027-10-12
- ended 2025-10-14
- released 2026-10-26
- released 2026-10-26
- released 2026-10-26
- 156supported
- released 2026-10-27
- released 2026-10-25supported until 2028-11-14
- released 2026-10-25supported until 2026-11-10
- released 2026-10-25supported until 2026-11-10
How to read version numbers
Most products have a branch and a release. The branch, for example PHP 8.4, defines the support period. The release, for example 8.4.27, contains specific fixes. While a branch is supported, it makes sense to run its latest release: an old 8.4.0 does not receive fixes just because the 8.4 branch is still alive.
On RPM-based distributions — RHEL, Rocky Linux, AlmaLinux and CentOS Stream — the package version is often lower than the upstream one. This is normal: the OS vendor backports security fixes into its own build without changing the main version number. On these systems, look for the fix in the package changelog rather than at the number:
dnf updateinfo list security
rpm -q --changelog php-cli | grep CVE-2026
Debian and Ubuntu follow the same principle; apt list --upgradable shows the available updates.
What matters in October 2026
Three urgent updates came out within two weeks. If any of these products is exposed to the internet, they are worth installing first.
- PHP. Versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 were released on 21 October. They fix CVE-2026-109618 and CVE-2026-109619, which allow code execution on the server without authentication. According to the PHP Foundation, remote code execution was demonstrated on Apache with mod_php using default settings. The fixed releases are listed in the PHP changelog and in the CERT-EU advisory.
- Node.js. Versions 22.23.4, 24.22.1 and 26.12.1 were released on 21 October with fixes for ten vulnerabilities. The most serious, CVE-2026-111497, concerns Brotli decompression and can lead to code execution (Node.js). Versions 24.22.2 and 26.13.0 followed on 28 October; with that release the 26 line became LTS (Node.js blog).
- GitLab. Versions 19.5.1, 19.4.3, 19.3.6 and releases for older branches came out on 21 October. They fix 12 vulnerabilities, including the critical CVE-2026-110264: code execution without authentication (GitLab). Versions 19.5.3, 19.4.5 and 19.3.7 followed with one more security fix (GitLab).
If you cannot update right away, you can temporarily restrict outside access to the service and schedule the update for the nearest maintenance window.
Server operating systems
| OS | Current release | Supported until | Note |
|---|---|---|---|
| Rocky Linux 9 | 9.8 | 31.05.2032 | A good choice for new servers and for moving off CentOS 7 |
| Rocky Linux 10 | 10.2 | 31.05.2035 | For new projects once the stack has been tested on EL10 |
| AlmaLinux 9 / 10 | 9.8 / 10.2 | 31.05.2032 / 31.05.2035 | A compatible alternative to Rocky Linux |
| RHEL 9 / 10 | 9.8 / 10.2 | 31.05.2032 / 31.05.2035 | Commercial support from Red Hat |
| CentOS Stream 9 | — | 31.05.2027 | Still updated, but the period is shorter; plan the move in advance |
| CentOS Stream 10 | — | 31.05.2030 | An upstream branch of RHEL, not an exact copy of a release |
| CentOS 7 | 7 (2009) | 30.06.2024 | Support has ended, no security fixes |
| Debian 13 | 13.7 | regular — 09.08.2028, LTS — 30.06.2030 | |
| Debian 12 | 12.15 | regular support ended, LTS — 30.06.2028 | |
| Ubuntu 26.04 LTS | 26.04.1 | 29.05.2031 | |
| Ubuntu 24.04 LTS | 24.04.5 | 31.05.2029 | |
| Ubuntu 22.04 LTS | 22.04 | 01.06.2027 | Time to plan the move |
If a server still runs CentOS 7, the calm way forward is to set up a new server on Rocky Linux 9 or AlmaLinux 9 next to it, move the project and test it before switching over. An in-place upgrade across several generations is usually slower and riskier.
Web servers and languages
| Product | Supported versions | Note |
|---|---|---|
| Apache HTTP Server | 2.4.69 | 2.4 is the only supported branch |
| nginx | 1.30.6 stable, 1.31.8 mainline | Stable is the more common choice for production |
| PHP | 8.5.12, 8.4.27, 8.3.36, 8.2.35 | 8.2 gets fixes until 31.12.2026, 8.3 until 31.12.2027, 8.4 until 31.12.2028, 8.5 until 31.12.2029 |
| Node.js | 26.13.0 LTS, 24.22.2 LTS, 22.23.4 LTS | 22 until 30.04.2027, 24 until 30.04.2028, 26 until 30.04.2029 |
| Python | 3.15.2, 3.14.10, 3.13.18, 3.12.16, 3.11.18 | 3.10 reached end of life on 01.10.2026; 3.11 is supported until 31.10.2027 |
| Composer | 2.10.3 | The 2.9 branch is no longer supported |
| OpenSSL | 3.5.9 LTS, 4.0.3, 4.1.0 | 3.5 until 08.04.2030; support for 3.6 ends on 01.11.2026 |
| OpenSSH | 10.6 | Operating systems usually ship a vendor build with backported fixes |
Choosing a PHP branch and preparing the move are covered in more detail in the article on PHP versions.
Databases, cache and search
| Product | Supported versions | Note |
|---|---|---|
| MySQL | 8.4.13 LTS, 9.7.4 LTS, 26.10.0 | 8.4 until 30.04.2032, 9.7 until 30.04.2034; the 8.0 branch reached end of life on 30.04.2026 |
| MariaDB | 10.11.19, 11.4.13, 11.8.9, 12.3.3 LTS | 10.11 until 16.02.2028, 11.4 until 29.05.2029; the 10.6 branch reached end of life on 06.07.2026 |
| PostgreSQL | 18.6, 17.11, 16.15, 15.19, 14.24 | Support for 14 ends on 12.11.2026 |
| Redis | 8.10.3, 8.8.4, 8.6.8, 8.4.8, 8.2.11 | Branches 7.2 and 7.4 get fixes until 01.12.2029 |
| Valkey | 9.1.3, 9.0.7, 8.1.11, 8.0.12 | An open-source alternative to Redis |
| Memcached | 1.6.45 | |
| OpenSearch | 3.9.0, 2.19.7 | |
| Elasticsearch | 9.5.5, 9.4.8, 8.19.23 | 8.19 until 15.07.2027 |
If a project runs on MySQL 8.0, the clearest next step is 8.4 LTS. Before the move, check how database users authenticate: in 8.4 the legacy mysql_native_password is disabled by default.
Bitrix
- Since 1 February 2026 the minimum PHP version for 1C-Bitrix products is 8.2, and 8.4 or later is recommended (server requirements, in Russian).
- The MySQL requirement is 8.0 or later (technical requirements, in Russian). As 8.0 is no longer supported upstream, 8.4 is a sensible target.
- The current virtual machine branch is BitrixVM 9; the latest release in its history is 9.0.10 from March 2026 (hosting course, in Russian). It installs on version 9 of Rocky Linux, AlmaLinux, CentOS Stream or Oracle Linux.
After an urgent PHP release, check that the fixed build is already available in your environment's repository. If it is not there yet, restrict outside access to the server and keep an eye on the update.
Development, delivery and automation
| Product | Current version | Note |
|---|---|---|
| Git | 2.56.0 | |
| GitLab CE | 19.5.3, 19.4.5, 19.3.7 | The three latest branches are supported; 19.3 until 19.11.2026 |
| GitLab Runner | 19.5.1 | Updated together with GitLab |
| Docker Engine | 29.9.2 | The 28 branch is no longer supported |
| Docker Compose | 5.6.1 | |
| n8n | 2.45.7 (stable) | The 2.46 branch is still in beta |
For CI images it is worth not only updating GitLab itself but also rebuilding job images: they may still contain old versions of system packages.
Workstations
A workstation has more software than a server, and it is updated more often. Automatic updates and a short regular check work best here.
| OS or application | Current version | Note |
|---|---|---|
| Windows 11 | 25H2, 26H2 | For Home and Pro: 25H2 until 12.10.2027, 26H2 until 10.10.2028; support for 24H2 ended on 13.10.2026 |
| Windows 10 | 22H2 | Regular support ended on 14.10.2025; with ESU, fixes continue until 12.10.2027 (Microsoft) |
| macOS | 27.2, 26.7.2, 15.8.2 | macOS 14 stopped receiving updates in September 2026 |
| Google Chrome | 157 | Updates automatically; restarting the browser applies the update |
| Mozilla Firefox | 159.0, ESR 153.6.0 | ESR suits places that need infrequent, predictable updates |
| PowerShell | 7.6.9 | 7.6 until 14.11.2028; 7.4 and 7.5 until 10.11.2026 |
| PhpStorm | 2026.2.4 | |
| Visual Studio Code | 1.144.0 | |
| Docker Desktop | 4.97.0 | |
| Git for Windows | 2.56.0.windows.4 | |
| WinSCP | 6.7 | Uses OpenSSL 3.5.9 |
| PuTTY | 0.85 | |
| 7-Zip | 26.05 |
A few calm habits that save time:
- Connect to servers over SFTP or SSH rather than FTP. FTP sends the password and the files in clear text, and modern clients, including PhpStorm and WinSCP, work with SFTP without extra setup.
- Check the list of updates once a week. On Windows this is
winget upgrade, on macOSsoftwareupdate -l, on Linux the distribution's package manager. - Keep SSH keys protected with a passphrase and avoid copying them between machines unless necessary.
Keeping the list in order
- Make an inventory. For each server and workstation, write down the OS, the key applications and their versions. A table that the team updates along with changes is enough.
- Note the dates. Next to each branch, write its end-of-support date. A move is easier to plan six months ahead than to carry out in a week.
- Separate the updates. Fixes within a branch are installed regularly and quickly. Moving to a new branch is separate work with a compatibility check.
- Test before release. A test copy, a backup and a rollback plan make an update calm.
- Watch for urgent releases. The mailing lists and RSS feeds of the projects you use announce them earlier than the news.
Sources
- endoflife.date: support dates and latest releases — aggregated data as of 31.10.2026.
- PHP: supported versions and PHP 8 changelog.
- PHP Foundation: security release of 21 October 2026.
- CERT-EU: critical vulnerabilities in PHP.
- Node.js: security releases of 21 October 2026.
- GitLab: release 19.5.1 and release 19.5.3.
- Microsoft: end of support for Windows 10.
- 1C-Bitrix: server software requirements and technical requirements, in Russian.
- 1C-Bitrix: hosting course, BitrixVM history, in Russian.
- Mozilla: current Firefox versions.
- WinSCP: project news.