Скачать или смотреть EOL Software: Risks and Recommendations

How risky is EOL software? In this video, learn about the risks involved with having unsupported EOL software in your organization, such as CentOS 6, CentOS 8, or AngularJS.

This video is from the webinar, “Open Source Security and Compliance: What Organizations Need to Know” that took place on March 23, 2023. It features Javier Perez, Chief OSS Evangelist and Senior Director of Product Management at Perforce Software.

Watch the complete webinar here: https://ter.li/xc2d7h

- -

About OpenLogic by Perforce:

OpenLogic offers end-to-end enterprise support for organizations using open source software in their infrastructure. With support for over 400 open source packages, guaranteed SLAs, and direct access to highly experienced Enterprise Architects, OpenLogic customers benefit from 24x7 ticket-based technical support, professional services, and training.
Follow OpenLogic on LinkedIn, Twitter, and don’t forget to subscribe to our YouTube channel for more videos on all things open source!

- -

Transcript (lightly edited for clarity):

A lot of organizations forget when software goes end-of-life, when open source software goes end-of-life, meaning the open source community is no longer supporting the project and is not going to update the software or that version or that major version of the open source software.
End-of-life software is not going to receive any more fixes or patches. So you have to keep an eye on that, right? Because again, there're going to be newly discoverable vulnerabilities and no one is going to go and patch and update that version because it's already end-of-life. For example. CentOS versions six and eight are end-of-life. CentOS seven is still supported, receiving updates. The community is providing long-term support until June of 2024. So just over a year from now, all versions of CentOS will be end-of-life.

You have to keep an eye on that because there's always risk. The same is true of AngularJS, which is end-of-life -- AngularJS version one, not the newest versions of Angular. AngularJS is version one, the one that was created based on JavaScript as opposed to TypeScript. And there are thousands of applications out there that were built based on using AngularJS. It's now end-of-life. They actually have been a few vulnerabilities disclosed, medium and high severity vulnerabilities disclosed since it went end-of-life. So you are at risk if you are not addressing that. At OpenLogic we offer patches extending the long-term support for both CentOS and AngularJS. Bottom line: When software reaches end-of-life, you have to move on to another version or another technology.