Apache Storm end of life dates
Apache Storm 3.1 is the newest release line, at 3.1.0 (12 Sept 2026). 1 line is still supported upstream: 3.1. 7 lines have reached end of life, most recently 2.8 on 22 Jul 2026. OSSeva ships patched builds for end-of-life Apache Storm 3.0, 2.8, 2.7, 2.6 and 2.4.
- Latest release
- 3.1.0
- Supported lines
- 1
- End-of-life lines
- 7
- Next end of life
- None scheduled
Apache Storm release timeline
All Apache Storm versions and end-of-life dates
| Version | Released | Security Support | Latest | OSSeva |
|---|---|---|---|---|
| 3.1 | 19 days ago(12 Sept 2026) | Yes | 3.1.0 | – |
| 3.0 | 2 months ago(22 Jul 2026) | Ended | 3.0.0 | Patched |
| 2.8 | 1 year and 8 months ago(25 Jan 2025) | Ended 2 months ago(22 Jul 2026) | 2.8.9 | Patched |
| 2.7 | 1 year and 11 months ago(18 Oct 2024) | Ended | 2.7.1 | Patched |
| 2.6 | 2 years and 10 months ago(22 Nov 2023) | Ended | 2.6.4 | Patched |
| 2.5 | 3 years and 2 months ago(4 Aug 2023) | Ended | 2.5.0 | – |
| 2.4 | 4 years and 6 months ago(25 Mar 2022) | Ended | 2.4.0 | Patched |
| 2.3 | 5 years ago(27 Sept 2021) | Ended | 2.3.0 | – |
Release dates come from storm.apache.org release announcements; the 2.8.9 announcement (2026-07-22) declared the whole 2.x line end of life, which sets eolFrom for 2.8, while older 2.x minors and 3.0 have no published EOL date (eolFrom null) and are marked EOL because they no longer receive releases. Checked 30 Sept 2026. Upstream policy: storm.apache.org. “Patched” marks end-of-life lines OSSeva ships signed, backported builds for.
Running an end-of-life Apache Storm version?
OSSeva keeps end-of-life Apache Storm patched with signed builds and backported CVE fixes, documents it for your auditor, and can run it for you, so the upgrade happens on your schedule rather than the project’s.
Apache Storm extended supportApache Storm end of life: common questions
What is the latest Apache Storm version?
3.1.0, released 12 Sept 2026, on the 3.1 line.
Which Apache Storm versions are still supported?
3.1. Every other line has reached end of life, per the dates in the table above.
Can I get security patches for an end-of-life Apache Storm version?
Yes. OSSeva ships signed builds with backported CVE fixes for Apache Storm 3.0, 2.8, 2.7, 2.6 and 2.4 after upstream support ends, on the Patch, Assure and Operate tiers, so you can stay on the version you run while you plan the upgrade.
Still running an end-of-life Apache Storm?
Tell us the versions and the estate size. We will tell you whether to upgrade or keep it patched, and what each costs.