// Supported versions

Supported versions
Every open source version OSSeva patches.

OSSeva ships patched, signed builds today for 139 version lines across 32 open source technologies, most of them past community end of life. They cover messaging, streaming, databases, search, coordination and big data, plus the frameworks and runtimes around them. This page is generated from the same catalogue as each technology page, so the two always agree.

Last reviewed 29 September 2026.

Get patched buildsHow OSSeva compares

Trusted globally by enterprises

Henry ScheinEnbridgeGojekMicrosoft

Messaging

RabbitMQ

VersionStatusOSSevaNote
3.8.xExtended supportPatched by OSSeva nowCVE backports where feasible; mitigations where not
3.9.xExtended supportPatched by OSSeva nowCVE backports + architectural guidance
3.10.xExtended supportPatched by OSSeva nowFull CVE coverage
3.11.xExtended supportPatched by OSSeva now
3.12.xExtended supportPatched by OSSeva now
3.13.xExtended supportPatched by OSSeva now1 patch in test
3.13.7Hardened buildPatched by OSSeva now
4.xCurrent upstreamSupported upstream; OSSeva tiers available

End-of-life guides: RabbitMQ 3.13, RabbitMQ 3.12, RabbitMQ 3.11, RabbitMQ 4.0

ActiveMQ Artemis

VersionStatusOSSevaNote
2.28.xExtended supportPatched by OSSeva now
2.29.xExtended supportPatched by OSSeva now
2.30.xExtended supportPatched by OSSeva now
2.31.xCurrent upstreamSupported upstream; OSSeva tiers available
2.32.xCurrent upstreamSupported upstream; OSSeva tiers available

Apache ActiveMQ Classic

VersionStatusOSSevaNote
5.15.xCommunity end of lifePatched by OSSeva nowNo upstream fixes. OSSeva backported
5.16.xCommunity end of lifePatched by OSSeva nowNo upstream fixes. OSSeva backported
5.17.xCommunity end of lifePatched by OSSeva nowNo upstream fixes. OSSeva backported
5.18.xCommunity end of lifePatched by OSSeva nowNo upstream fixes. OSSeva backported
5.19.xCurrent upstreamSupported upstream; OSSeva tiers availableUpstream maintained
6.xCurrent upstreamSupported upstream; OSSeva tiers availableUpstream maintained

End-of-life guides: Apache ActiveMQ Classic 5.18

Streaming and stream processing

Apache Kafka

VersionStatusOSSevaNote
2.8.xExtended supportPatched by OSSeva now
3.0.xExtended supportPatched by OSSeva now
3.3.xExtended supportPatched by OSSeva now
3.6.xExtended supportPatched by OSSeva now
3.7.xExtended supportPatched by OSSeva now
3.8.xExtended supportPatched by OSSeva nowArchived upstream. OSSeva patched
3.9.xExtended supportPatched by OSSeva nowLast ZooKeeper-capable line, final 3.9.2. OSSeva patched
4.xCurrent upstreamSupported upstream; OSSeva tiers availableKRaft only

End-of-life guides: Apache Kafka 3.8, Apache Kafka 3.9, Apache Kafka 2.8

Apache Pulsar

VersionStatusOSSevaNote
2.10.xExtended supportPatched by OSSeva nowFull CVE coverage
2.11.xExtended supportPatched by OSSeva nowFull CVE coverage
3.0.xExtended supportPatched by OSSeva now
3.1.xCurrent upstreamSupported upstream; OSSeva tiers available
3.2.xCurrent upstreamSupported upstream; OSSeva tiers available

End-of-life guides: Apache Pulsar 3.0 LTS

Apache Storm

VersionStatusOSSevaNote
1.2.xCommunity end of lifePatched by OSSeva nowNo release since Oct 2021. OSSeva patched
2.4.xCommunity end of lifePatched by OSSeva nowCommunity EOL 22 Jul 2026. OSSeva patched
2.6.xCommunity end of lifePatched by OSSeva nowCommunity EOL 22 Jul 2026. OSSeva patched
2.7.xCommunity end of lifePatched by OSSeva nowCommunity EOL 22 Jul 2026. OSSeva patched
2.8.xCommunity end of lifePatched by OSSeva nowCommunity EOL 22 Jul 2026. OSSeva patched
3.xCurrent upstreamSupported upstream; OSSeva tiers available3.1.0 released 12 Sep 2026, Java 25

End-of-life guides: Apache Storm 2

Apache Flink

VersionStatusOSSevaNote
1.15.x, 1.16.xCommunity end of lifePatched by OSSeva nowLast releases 1.15.4, 1.16.3. Bundles ZK 3.5.9. OSSeva patched
1.17.xCommunity end of lifePatched by OSSeva nowLast release 1.17.2, 29 Nov 2023. OSSeva patched
1.18.xCommunity end of lifePatched by OSSeva nowLast release 1.18.1, 19 Jan 2024. OSSeva patched
1.19.xCommunity end of lifePatched by OSSeva nowLast release 1.19.3, 10 Jul 2025. OSSeva patched
1.20.x (LTS)Extended supportPatched by OSSeva nowUpstream LTS (1.20.5). Bundles EOL ZK 3.7.1
2.xCurrent upstreamSupported upstream; OSSeva tiers available2.3.0 released 25 Jun 2026. Upstream maintained

Data, search, coordination and big data

PostgreSQL

VersionStatusOSSevaNote
11.xExtended supportPatched by OSSeva now
12.xExtended supportPatched by OSSeva now
13.xExtended supportPatched by OSSeva now
14.xCurrent upstreamSupported upstream; OSSeva tiers available
15.xCurrent upstreamSupported upstream; OSSeva tiers available
16.xCurrent upstreamSupported upstream; OSSeva tiers available

End-of-life guides: PostgreSQL 14, PostgreSQL 13, PostgreSQL 12, PostgreSQL 11, PostgreSQL 15

GemFire / Geode

VersionStatusOSSevaNote
GemFire 9.xExtended supportPatched by OSSeva nowFull CVE coverage
GemFire 10.xExtended supportPatched by OSSeva nowFull CVE coverage
Geode 1.14.xExtended supportPatched by OSSeva nowFull CVE coverage
Geode 1.15.xExtended supportPatched by OSSeva now
Geode 2.xCurrent upstreamSupported upstream; OSSeva tiers available

Redis

VersionStatusOSSevaNote
6.2.xExtended supportPatched by OSSeva nowFull CVE coverage
7.0.xExtended supportPatched by OSSeva now1 patch in test
7.2.xCurrent upstreamSupported upstream; OSSeva tiers available
Valkey 7.2.xCurrent upstreamSupported upstream; OSSeva tiers availableBSD fork
Valkey 8.xCurrent upstreamSupported upstream; OSSeva tiers available

End-of-life guides: Redis 7.0, Redis 6.2

Apache ZooKeeper

VersionStatusOSSevaNote
3.4.xCommunity end of lifePatched by OSSeva nowCommunity EOL 1 Jun 2020. OSSeva patched
3.5.xCommunity end of lifePatched by OSSeva nowCommunity EOL 1 Jun 2022. OSSeva patched
3.6.xCommunity end of lifePatched by OSSeva nowCommunity EOL 30 Dec 2022. OSSeva patched
3.7.xCommunity end of lifePatched by OSSeva nowCommunity EOL 2 Feb 2024. OSSeva patched
3.8.xExtended supportPatched by OSSeva nowUpstream maintained
3.9.xCurrent upstreamSupported upstream; OSSeva tiers availableUpstream maintained

End-of-life guides: Apache ZooKeeper 3.5, Apache ZooKeeper 3.7, Apache ZooKeeper 3.6

Apache Solr

VersionStatusOSSevaNote
6.xCommunity end of lifePatched by OSSeva nowCommunity EOL 13 Mar 2019. OSSeva patched
7.xCommunity end of lifePatched by OSSeva nowCommunity EOL 11 May 2022. OSSeva patched
8.xCommunity end of lifePatched by OSSeva nowCommunity EOL 25 Oct 2024. OSSeva patched
9.xExtended supportPatched by OSSeva nowUpstream maintained
10.xCurrent upstreamSupported upstream; OSSeva tiers availableReleased 3 Mar 2026

End-of-life guides: Apache Solr 8, Apache Solr 7

Apache NiFi

VersionStatusOSSevaNote
1.19.xCommunity end of lifePatched by OSSeva now1.x line ended. OSSeva patched
1.23.xCommunity end of lifePatched by OSSeva now1.x line ended. OSSeva patched
1.26.xCommunity end of lifePatched by OSSeva now1.x line ended. OSSeva patched
1.28.xCommunity end of lifePatched by OSSeva nowFinal 1.x release. OSSeva patched
2.xCurrent upstreamSupported upstream; OSSeva tiers availableUpstream maintained

End-of-life guides: Apache NiFi 1.x

Hazelcast

VersionStatusOSSevaNote
IMDG 3.12.xCommunity end of lifePatched by OSSeva nowSeveral majors behind. OSSeva patched
IMDG 4.0.xCommunity end of lifePatched by OSSeva nowSeveral majors behind. OSSeva patched
IMDG 4.2.xCommunity end of lifePatched by OSSeva nowSeveral majors behind. OSSeva patched
Platform 5.3.xExtended supportPatched by OSSeva nowSuperseded. OSSeva patched
Platform 5.5.xExtended supportPatched by OSSeva nowReleased Jul 2024
Platform 5.7.xCurrent upstreamSupported upstream; OSSeva tiers availableReleased May 2026

Apache Ignite

VersionStatusOSSevaNote
2.8.xCommunity end of lifePatched by OSSeva nowOSSeva patched
2.9.xCommunity end of lifePatched by OSSeva nowOSSeva patched
2.13.xCommunity end of lifePatched by OSSeva nowOSSeva patched
2.16.xExtended supportPatched by OSSeva nowOSSeva patched
3.xCurrent upstreamSupported upstream; OSSeva tiers availableRewritten line. upstream maintained

MongoDB

VersionStatusOSSevaNote
4.2Community end of lifePatched by OSSeva nowNo upstream fix for CVE-2025-14847
4.4Community end of lifePatched by OSSeva nowLast line that runs without AVX
5.0Community end of lifePatched by OSSeva nowPatched by OSSeva
6.0Community end of lifePatched by OSSeva nowPatched by OSSeva
7.0Current upstreamSupported upstream; OSSeva tiers availableSupported upstream
8.0Current upstreamSupported upstream; OSSeva tiers availableSupported upstream

End-of-life guides: MongoDB 6.0, MongoDB 4.4, MongoDB 5.0

Elasticsearch

VersionStatusOSSevaNote
7.10.2Extended supportPatched by OSSeva nowLast Apache-2.0 release
7.17Extended supportPatched by OSSeva nowEOL 15 Jan 2026; last release 7.17.29
8.xCurrent upstreamSupported upstream; OSSeva tiers availableSupported upstream
OpenSearch 2.xCurrent upstreamSupported upstream; OSSeva tiers availableMigration target

End-of-life guides: Elasticsearch 7.17, Elasticsearch 7.10

Apache HBase

VersionStatusOSSevaNote
1.7.xCommunity end of lifePatched by OSSeva nowCommunity EOL Sep 2022. OSSeva patched
2.2.xCommunity end of lifePatched by OSSeva nowCommunity EOL Oct 2021. OSSeva patched
2.3.xCommunity end of lifePatched by OSSeva nowCommunity EOL Mar 2022. OSSeva patched
2.4.xCommunity end of lifePatched by OSSeva nowCommunity EOL Jul 2024. OSSeva patched
2.5.xExtended supportPatched by OSSeva nowUpstream maintained
2.6.xExtended supportPatched by OSSeva nowUpstream maintained
3.0.xCurrent upstreamSupported upstream; OSSeva tiers availableReleased 5 Aug 2026

End-of-life guides: Apache HBase 2.4

Apache Hadoop

VersionStatusOSSevaNote
2.8.xCommunity end of lifePatched by OSSeva nowCommunity EOL 9 Mar 2020. OSSeva patched
2.9.xCommunity end of lifePatched by OSSeva nowCommunity EOL 7 Sep 2020. OSSeva patched
2.10.xExtended supportPatched by OSSeva nowNo release since 31 May 2022. OSSeva patched
3.1.xCommunity end of lifePatched by OSSeva nowCommunity EOL Jun 2021. OSSeva patched
3.2.xCommunity end of lifePatched by OSSeva nowCommunity EOL 22 Dec 2023. OSSeva patched
3.3.xExtended supportPatched by OSSeva nowNo release since 23 Jun 2023. OSSeva patched
3.4.xExtended supportPatched by OSSeva nowUpstream maintained, latest 3.4.3
3.5.xCurrent upstreamSupported upstream; OSSeva tiers availableReleased 2 Apr 2026
CDH 5.14 to 5.16Community end of lifePatched by OSSeva nowCloudera EoS Dec 2020. OSSeva patched
CDH 6.2 and 6.3Community end of lifePatched by OSSeva nowCloudera EoS Mar 2022. OSSeva patched
HDP 2.6Community end of lifePatched by OSSeva nowCloudera EoS Dec 2020. OSSeva patched
HDP 3.1Community end of lifePatched by OSSeva nowCloudera EoS Dec 2021. OSSeva patched

End-of-life guides: Cloudera CDH 6, Hortonworks HDP 3.1

Apache Hive

VersionStatusOSSevaNote
1.2.xCommunity end of lifePatched by OSSeva nowCommunity EOL 11 Apr 2024. OSSeva patched
2.3.xCommunity end of lifePatched by OSSeva nowCommunity EOL 20 May 2024. OSSeva patched
3.1.xCommunity end of lifePatched by OSSeva nowCommunity EOL 8 Oct 2024. OSSeva patched
4.0.xExtended supportPatched by OSSeva nowSuperseded by 4.1 and 4.2
4.1.xExtended supportPatched by OSSeva nowSuperseded by 4.2
4.2.xCurrent upstreamSupported upstream; OSSeva tiers available4.2.1 released 24 Aug 2026

End-of-life guides: Apache Hive 3

Apache Druid

VersionStatusOSSevaNote
0.22.xCommunity end of lifePatched by OSSeva nowArchived by Apache. OSSeva patched
25.xCommunity end of lifePatched by OSSeva nowArchived by Apache. OSSeva patched
30.x to 35.xCommunity end of lifePatched by OSSeva nowArchived by Apache. OSSeva patched
36.xExtended supportPatched by OSSeva nowPrevious release, 9 Feb 2026
37.xCurrent upstreamSupported upstream; OSSeva tiers availableLatest release, 8 May 2026

ClickHouse

VersionStatusOSSevaNote
24.x and olderCommunity end of lifePatched by OSSeva nowOut of community support. OSSeva patched
25.x (incl. 25.3, 25.8 LTS)Community end of lifePatched by OSSeva nowOut of community support. OSSeva patched
26.1, 26.2, 26.4 to 26.6Community end of lifePatched by OSSeva nowDropped from the stable window. OSSeva patched
26.3 LTSExtended supportPatched by OSSeva nowLTS released 27 Mar 2026. Upstream maintained
26.7, 26.9Current upstreamSupported upstream; OSSeva tiers availableStable. Upstream maintained
26.8 LTSCurrent upstreamSupported upstream; OSSeva tiers availableLTS released 30 Aug 2026. Upstream maintained

etcd

VersionStatusOSSevaNote
3.3.x and olderCommunity end of lifePatched by OSSeva nowCommunity EOL. OSSeva patched
3.4.xCommunity end of lifePatched by OSSeva nowFinal release 3.4.45, 1 Jun 2026. OSSeva patched
3.5.xExtended supportPatched by OSSeva nowUpstream maintained (3.5.34). No end date announced
3.6.xCurrent upstreamSupported upstream; OSSeva tiers availableUpstream maintained (3.6.15)
3.7.xCurrent upstreamSupported upstream; OSSeva tiers availableGA 8 Jul 2026. Upstream maintained (3.7.2)

End-of-life guides: etcd 3.4

Frameworks

Spring Framework

VersionStatusOSSevaNote
5.2.xExtended supportPatched by OSSeva now
5.3.xExtended supportPatched by OSSeva now
6.0.xCurrent upstreamSupported upstream; OSSeva tiers available
6.1.xCurrent upstreamSupported upstream; OSSeva tiers available

End-of-life guides: Spring Framework 5.3, Java 8

Spring Boot

VersionStatusOSSevaNote
2.6.xExtended supportPatched by OSSeva nowFull CVE coverage
2.7.xExtended supportPatched by OSSeva nowFull CVE coverage
3.0.xCommunity end of lifePatched by OSSeva nowSTS, community EOL. OSSeva patched
3.1.xCommunity end of lifePatched by OSSeva nowSTS, community EOL. OSSeva patched
3.2.xCurrent upstreamSupported upstream; OSSeva tiers available
3.3.xCurrent upstreamSupported upstream; OSSeva tiers available

End-of-life guides: Spring Boot 2.7

Spring Security

VersionStatusOSSevaNote
5.6.xExtended supportPatched by OSSeva nowFull CVE coverage
5.7.xExtended supportPatched by OSSeva nowFull CVE coverage
5.8.xExtended supportPatched by OSSeva nowFull CVE coverage
6.0.xCommunity end of lifePatched by OSSeva nowSTS, community EOL. OSSeva patched
6.1.xCommunity end of lifePatched by OSSeva nowSTS, community EOL. OSSeva patched
6.2.xCurrent upstreamSupported upstream; OSSeva tiers available

End-of-life guides: Spring Security 5.8

Apache Camel

VersionStatusOSSevaNote
2.25.xCommunity end of lifePatched by OSSeva nowLong past upstream EOL. OSSeva patched
3.14.x LTSCommunity end of lifePatched by OSSeva nowPast upstream EOL. OSSeva patched
3.20.x LTSCommunity end of lifePatched by OSSeva nowPast upstream EOL. OSSeva patched
4.4.x LTSCommunity end of lifePatched by OSSeva nowPast upstream EOL. OSSeva patched
4.8.x LTSCommunity end of lifePatched by OSSeva nowPast upstream EOL. OSSeva patched
4.18.x LTSExtended supportPatched by OSSeva nowUpstream EOL Feb 2027
4.22.x LTSCurrent upstreamSupported upstream; OSSeva tiers availableUpstream EOL Aug 2027

End-of-life guides: Apache Camel 4.18 LTS, Apache Camel 3

Application servers

Apache Tomcat

VersionStatusOSSevaNote
8.5.xExtended supportPatched by OSSeva nowCommunity EOL March 2024
9.0.xExtended supportPatched by OSSeva nowFull CVE coverage
10.0.xExtended supportPatched by OSSeva nowFull CVE coverage
10.1.xCurrent upstreamSupported upstream; OSSeva tiers available
11.xCurrent upstreamSupported upstream; OSSeva tiers available

End-of-life guides: Apache Tomcat 9.0, Apache Tomcat 8.5

Runtimes and service discovery

Node.js

VersionStatusOSSevaNote
14.x (Fermium)Community end of lifePatched by OSSeva nowFull CVE coverage
16.x (Gallium)Community end of lifePatched by OSSeva nowFull CVE coverage
18.x (Hydrogen)Community end of lifePatched by OSSeva nowCommunity EOL 30 Apr 2025. OSSeva patched
20.x (Iron)Community end of lifePatched by OSSeva nowCommunity EOL 30 Apr 2026. OSSeva patched
22.x (Jod)Current upstreamSupported upstream; OSSeva tiers availableMaintenance LTS

End-of-life guides: Node.js 18, Node.js 20, Node.js 16, Node.js 14

.NET

VersionStatusOSSevaNote
.NET 6.0 (LTS)Community end of lifePatched by OSSeva nowCommunity EOL Nov 2024
.NET 7.0 (STS)Community end of lifePatched by OSSeva nowCommunity EOL May 2024
.NET 8.0 (LTS)Current upstreamSupported upstream; OSSeva tiers availableLTS through Nov 2026
.NET 9.0 (STS)Current upstreamSupported upstream; OSSeva tiers availableCurrent

End-of-life guides: .NET 8, .NET 6, .NET 7

Erlang/OTP

VersionStatusOSSevaNote
OTP 24Community end of lifePatched by OSSeva nowCommunity EOL 10 May 2024. OSSeva patched
OTP 25Community end of lifePatched by OSSeva nowCommunity EOL 17 May 2025. OSSeva patched
OTP 26Community end of lifePatched by OSSeva nowCommunity EOL 26 May 2026. OSSeva patched
OTP 27Extended supportPatched by OSSeva nowCommunity support to 20 May 2027
OTP 28Current upstreamSupported upstream; OSSeva tiers availableCommunity support to 20 May 2028

End-of-life guides: Erlang/OTP 27, Erlang/OTP 26, Erlang/OTP 25, Erlang/OTP 24

HashiCorp Consul

VersionStatusOSSevaNote
1.14.x and olderCommunity end of lifePatched by OSSeva nowMPL 2.0. Out of support. OSSeva patched
1.15.x (LTS)Community end of lifePatched by OSSeva nowLTS ended 30 Apr 2025. MPL builds OSSeva patched
1.16.xCommunity end of lifePatched by OSSeva nowMPL to 1.16.3. OSSeva patched
1.17.xCommunity end of lifeSupported upgrade path, no patched buildBSL. Out of support. OSSeva supported upgrade
1.18.x (LTS)Community end of lifeSupported upgrade path, no patched buildBSL. LTS ended 30 Apr 2026. OSSeva supported upgrade
1.19.x, 1.20.xCommunity end of lifeSupported upgrade path, no patched buildBSL. Out of support. OSSeva supported upgrade
1.21.x (LTS)Extended supportPatched by OSSeva nowLast LTS. Supported to 30 Apr 2027
1.22.xExtended supportPatched by OSSeva nowSupported to 31 Oct 2026
2.0.xCurrent upstreamSupported upstream; OSSeva tiers availableIBM SC2 model. Supported to 30 Apr 2028

End-of-life guides: HashiCorp Consul 1.18

Bitnami drop-in images

Since Bitnami moved versioned tags to the unmaintained bitnamilegacy archive on 28 August 2025, pinned images stopped receiving fixes. OSSeva ships images that keep the Bitnami layout for the families below.

ImageOSSeva imageVersions
PostgreSQLAvailable nowPostgreSQL 11 to 14, including versions past community end of life
RedisAvailable nowRedis 6.x and 7.2, the BSD-licensed lines, plus Valkey
Apache KafkaAvailable nowKafka 2.8 to 3.9, including ZooKeeper-mode clusters
Apache ZooKeeperAvailable nowZooKeeper 3.5 to 3.8
RabbitMQAvailable nowRabbitMQ 3.8 to 3.13 with a patched Erlang/OTP runtime
MongoDBAvailable nowMongoDB 4.2 to 6.0, including hardware without AVX
ElasticsearchAvailable nowElasticsearch 7.10.2 and 7.17
MySQLMigration guide to the official image
MariaDBMigration guide to the official image
KeycloakMigration guide to the official image

ZooKeeper dependency map

ZooKeeper ships inside many of the products above, often as an end-of-life line. OSSeva patches ZooKeeper 3.4, 3.5, 3.6, 3.7 as well as the product around it. The oldest bundled version comes from each project's build file at the release tag, or the vendor's component list.

ProductUses ZooKeeperOldest bundled ZooKeeper
Apache KafkaRemoved in Kafka 4.03.5.9 in Kafka 2.8.2
Apache SolrRequired for SolrCloud3.4.13 in Solr 8.0.0
Apache HBaseRequired (server side)3.4.10 in HBase 1.7.2
Apache HadoopRequired for HA3.4.14 in Hadoop 2.10.2
Apache HiveUsed for HA, discovery and locks3.4.6 in Hive 3.1.3
Apache DruidDefault; optional only experimentally3.5.9 in Druid 0.22.1
ClickHouseZooKeeper or ClickHouse KeeperExternal ensemble
Apache NiFiDefault for clusters3.8.0 in NiFi 1.19.1
Apache Pulsar and BookKeeperDefault; Oxia available3.9.1 in Pulsar 2.10.6
Apache StormRequired3.5.9 in Storm 2.4.0
Apache FlinkOne of two HA options3.7.1 in Flink 1.17.2, 1.18.1 and 1.20.3
Patroni (PostgreSQL HA)One of several DCS optionsExternal ensemble
Apache AccumuloRequired3.4.14 in Accumulo 1.10.4
Apache PinotRequired (through Helix)3.9.5 in Pinot 1.5.1
Cloudera CDH, HDP and CDPBundled in every release3.4.5 in CDH 5 (5.0 to 5.16)

Full map with CVEs by version: what runs on ZooKeeper.

Frequently asked questions

Which versions does OSSeva patch?

139 version lines across 32 technologies, listed in full on this page. Any line marked "Patched by OSSeva now" has signed builds with backported security fixes available today, whether it is past community end of life or still inside its upstream window.

What does each status mean?

Community end of life: the project no longer ships fixes, and OSSeva does. Extended support: OSSeva patches the line alongside or beyond the upstream window. Hardened build: a specific release OSSeva maintains as a fixed, patched target. Current upstream: the project still ships fixes, and OSSeva provides support tiers and upgrade help.

Can I get patched builds for an end-of-life version today?

Yes. Every line marked as patched here is available now through OSSeva Patch, delivered as Maven artefacts, packages, tarballs or container images, depending on the technology.

Does OSSeva patch the ZooKeeper inside Kafka, HBase or Solr?

Yes. ZooKeeper 3.4, 3.5, 3.6 and 3.7 are patched, and a patched product ships with a patched ZooKeeper under it. The dependency map below shows which ZooKeeper each product bundles.

Why are some Consul versions not patched?

Consul 1.17 and later are under the Business Source License. OSSeva patches the MPL 2.0 releases up to 1.16.3 and runs supported upgrades for the BSL versions rather than redistributing modified BSL code.

Does OSSeva replace Bitnami images?

For 7 image families, yes: PostgreSQL, Redis, Apache Kafka, Apache ZooKeeper, RabbitMQ, MongoDB, Elasticsearch. The images keep Bitnami's environment variables, /bitnami data paths and non-root user, so existing charts keep working.

Running a version on this list? Patched builds are ready.

Builds ship with backported fixes, signatures and a support tier: Patch, Assure or Operate.

Get patched buildsCheck the EOL tracker →