Unsupported Software Findernotice of vendor support

Exim end of life dates

The support dates the endoflife.date record (community-maintained) holds for Exim, read on 30 Sep 2026: when security support ends for each version (cycle), when active support ends, and extended support where the record shows it. Below them, what Cyber Essentials, the Essential Eight, CIS Controls v8, PCI DSS and NIST SP 800-53 ask of a version past its end.

Oldest version still in support
4.99, security support to no end date announced
Next end date
none announced in the record
Vendor's own notice
the vendor lifecycle policy for Exim, authoritative; each version below links its own notice where the record carries one
Record
Exim
Kind
server application
Versions in the record
41
Versions past vendor support
40
Essential Eight class
an application outside the priority classes: Patch applications asks for its removal once no longer supported at ML3; at ML1 and ML2 no held Essential Eight clause turns on it.
Source
endoflife.date/exim, community-maintained, MIT licence, read 30 Sep 2026; sources

Exim versions and their support dates

as at 30 Sep 2026
CycleReleasedActive support endsSecurity support endsExtended support endsOn the read dateVendor notice
4.9928 Oct 2025not given separatelyno end date announcednone in the recordsupported, no end date announcednotice
4.9810 Jul 2024not given separately28 Oct 2025none in the recordpast vendor supportnone in the record
4.974 Nov 2023not given separately10 Jul 2024none in the recordpast vendor supportnone in the record
4.9625 Jun 2022not given separately4 Nov 2023none in the recordpast vendor supportnone in the record
4.9528 Sep 2021not given separately25 Jun 2022none in the recordpast vendor supportnone in the record
4.941 Jun 2020not given separately28 Sep 2021none in the recordpast vendor supportnone in the record
4.938 Dec 2019not given separately1 Jun 2020none in the recordpast vendor supportnone in the record
4.9210 Feb 2019not given separately8 Dec 2019none in the recordpast vendor supportnone in the record
4.9115 Apr 2018not given separately10 Feb 2019none in the recordpast vendor supportnotice
4.9019 Dec 2017not given separately15 Apr 2018none in the recordpast vendor supportnotice
4.897 Mar 2017not given separately19 Dec 2017none in the recordpast vendor supportnotice
4.8818 Dec 2016not given separately7 Mar 2017none in the recordpast vendor supportnotice
4.876 Apr 2016not given separately18 Dec 2016none in the recordpast vendor supportnotice
4.8626 Jul 2015not given separately6 Apr 2016none in the recordpast vendor supportnotice
4.8512 Jan 2015not given separately26 Jul 2015none in the recordpast vendor supportnotice
4.8411 Aug 2014not given separately12 Jan 2015none in the recordpast vendor supportnotice
4.8321 Jul 2014not given separately11 Aug 2014none in the recordpast vendor supportnotice
4.8228 Oct 2013not given separately21 Jul 2014none in the recordpast vendor supportnotice
4.8031 May 2012not given separately28 Oct 2013none in the recordpast vendor supportnotice
4.7710 Oct 2011not given separately31 May 2012none in the recordpast vendor supportnotice
4.769 May 2011not given separately10 Oct 2011none in the recordpast vendor supportnotice
4.7522 Mar 2011not given separately9 May 2011none in the recordpast vendor supportnotice
4.7424 Jan 2011not given separately22 Mar 2011none in the recordpast vendor supportnotice
4.7326 Dec 2010not given separately25 Jan 2011none in the recordpast vendor supportnotice
4.723 Jun 2010not given separately27 Dec 2010none in the recordpast vendor supportnotice
4.7123 Nov 2009not given separately3 Jun 2010none in the recordpast vendor supportnotice
4.7013 Nov 2009not given separately24 Nov 2009none in the recordpast vendor supportnotice
4.691 Dec 2007not given separately14 Nov 2009none in the recordpast vendor supportnotice
4.6830 Aug 2007not given separately2 Dec 2007none in the recordpast vendor supportnotice
4.6717 Apr 2007not given separately31 Aug 2007none in the recordpast vendor supportnotice
4.668 Jan 2007not given separately18 Apr 2007none in the recordpast vendor supportnotice
4.652 Jan 2007not given separately8 Jan 2007none in the recordpast vendor supportnotice
4.6420 Dec 2006not given separately2 Jan 2007none in the recordpast vendor supportnotice
4.6331 Jul 2006not given separately20 Dec 2006none in the recordpast vendor supportnotice
4.6228 Apr 2006not given separately1 Aug 2006none in the recordpast vendor supportnotice
4.614 Apr 2006not given separately29 Apr 2006none in the recordpast vendor supportnotice
4.544 Oct 2005not given separately5 Apr 2006none in the recordpast vendor supportnotice
4.5326 Sep 2005not given separately4 Oct 2005none in the recordpast vendor supportnotice
4.521 Jul 2005not given separately26 Sep 2005none in the recordpast vendor supportnotice
4.514 May 2005not given separately1 Jul 2005none in the recordpast vendor supportnotice
4.5017 Feb 2005not given separately4 May 2005none in the recordpast vendor supportnotice

A version this table does not list is not in the record: the finder reads it as unknown, never supported. The dates are the record's own; nothing here states a date the record does not hold.

What the schemes ask of a version past its end

Cyber Essentials
software on in-scope devices licensed and supported by the vendor, meaning it still receives security updates; unsupported software removed or segregated (SU.1, SU.4). Cyber Essentials Plus: removed, or isolated with compensating controls (PM-02).
Essential Eight
An application outside the priority classes: Patch applications asks for its removal once no longer supported at ML3; at ML1 and ML2 no held Essential Eight clause turns on it.
CIS Controls v8, Safeguard 2.2
only software that still receives vendor support may be marked authorised; unsupported software kept for the mission needs a recorded exception with compensating controls and the acceptance of the remaining risk; support status checked at least monthly.
PCI DSS 12.3.4
hardware and software reviewed at least every 12 months: that vendors still supply timely security fixes, end-of-life announcements documented, and a remediation plan for outdated technology approved by senior management.
NIST SP 800-53 SA-22
system components replaced when support is no longer available from the developer, vendor or manufacturer, or alternative sources of continued support provided.

See the specimen list runCheck your own list