Red Hat Enterprise Linux 7 (ELS)
Red Hat Enterprise Linux 7 (ELS)
Third-party support for the Red Hat Enterprise Linux 7 (ELS): 24/7 engineers manage issues, remediate vulnerabilities, and help you maintain compliance — independent of the vendor contract.
24/7 engineers own your Red Hat Enterprise Linux 7 (ELS) incidents end to end.
Mitigation and patch-around guidance when the vendor no longer ships fixes.
Controls evidence and documentation that keep auditors satisfied.
Specifications
- product
- rhel
- release
- 7
- product Label
- Red Hat Enterprise Linux
- release Label
- 7 (ELS)
- codename
- lts
- true
- latest Version
- 7.9
- release Date
- 2014-06-10
- maintained
- true
- source Url
- https://endoflife.date/rhel
Lifecycle Dates
- End of Service Life
- May 31, 2029
- Last OEM Support
- Aug 6, 2019
OEM vs. 3rd Party Support
See how third-party support compares to the vendor contract for Red Hat Enterprise Linux 7 (ELS) — monitoring, break/fix, vulnerability work, operations and compliance, before and after EOSL.
| Feature | OEM Support | 3rd Party Support |
|---|---|---|
| Post-EOSL Support | ||
| Break/Fix Support | Until EOSL | |
| 24/7 Monitoring | ||
| Vulnerability Scanning & Remediation | ||
| Managed Operations | ||
| Procedure & Configuration Review | ||
| Compliance & Audit Documentation | Limited | |
| Discounted Migration to Other Platforms |
Why Choose 3rd Party Support for Red Hat Enterprise Linux 7 (ELS)?
Vulnerability Remediation
Scanning, mitigation and patch-around guidance for Red Hat Enterprise Linux 7 (ELS) when the vendor no longer ships fixes.
Compliance Maintenance
Procedure review, controls evidence and the documentation auditors ask for — maintained continuously, not scrambled at audit time.
24/7 Expert Support
Engineers who know this release monitor, manage and fix issues around the clock — break/fix to managed operations.
Red Hat Enterprise Linux 7 (ELS) Support: Frequently Asked Questions
Is the Red Hat Enterprise Linux 7 (ELS) still supported?
Yes. The Red Hat Enterprise Linux 7 (ELS) is currently supported by Red Hat, and third-party support is available as an alternative — issue management, vulnerability remediation, and compliance help independent of the vendor contract.
When is the Red Hat Enterprise Linux 7 (ELS) end of service life (EOSL) date?
Red Hat lists the end of service life for the Red Hat Enterprise Linux 7 (ELS) as May 31, 2029.
Can I keep using the Red Hat Enterprise Linux 7 (ELS) after its EOSL date?
Yes. EOSL means Red Hat stops issuing patches and support — the software itself keeps running. Third-party support covers it from there: issue management, security vulnerability remediation, and the compliance documentation auditors ask for, for as long as you choose to run it.
How much does third-party support for the Red Hat Enterprise Linux 7 (ELS) cost?
Typically 40-70% below the OEM maintenance renewal price. Exact pricing depends on quantity, service level and location — request a quote and we respond within 24 hours.
Known Vulnerabilities Affecting Red Hat Enterprise Linux 7 (ELS)
832 published CVEs affect the Red Hat Enterprise Linux 7 (ELS), including 401 rated critical or high severity. Our 24/7 engineers help you assess exposure, prioritize fixes and apply available patches.
| CVE | Severity | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-53002 | CRITICAL | 9.8 | Jun 24, 2026 | In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: remove sprintf usage Replace it with scnprintf, the buffer sizes are expected to be large enough to hold the result, no need for snprintf+overflow check. Increase buffer size in mangle_content_len() while at it. BUG: KASAN: stack-out-of-bounds in vsnprintf+0xea5/0x1270 Write of size 1 at addr [..] vsnprintf+0xea5/0x1270 sprintf+0xb1/0xe0 mangle_content_len+0x1ac/0x280 nf_nat_sdp_session+0x1cc/0x240 |
| CVE-2023-34152 | CRITICAL | 9.8 | May 30, 2023 | A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured. |
| CVE-2021-3657 | CRITICAL | 9.8 | Feb 18, 2022 | A flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large (>=2GiB) IMAP literals, malicious or compromised IMAP servers, and hypothetically even external email senders, could cause several different buffer overflows, which could conceivably be exploited for remote code execution. |
| CVE-2021-3773 | CRITICAL | 9.8 | Feb 16, 2022 | A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks. |
| CVE-2021-20314 | CRITICAL | 9.8 | Aug 12, 2021 | Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages. |
| CVE-2021-20236 | CRITICAL | 9.8 | May 28, 2021 | A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. |
| CVE-2020-36329 | CRITICAL | 9.8 | May 21, 2021 | A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. |
| CVE-2020-36328 | CRITICAL | 9.8 | May 21, 2021 | A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. |
| CVE-2018-25014 | CRITICAL | 9.8 | May 21, 2021 | A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol(). |
| CVE-2018-25011 | CRITICAL | 9.8 | May 21, 2021 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16(). |
| CVE-2021-3466 | CRITICAL | 9.8 | Mar 25, 2021 | A flaw was found in libmicrohttpd. A missing bounds check in the post_process_urlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Only version 0.9.70 is vulnerable. |
| CVE-2019-10196 | CRITICAL | 9.8 | Mar 19, 2021 | A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent passes an auth option to the Buffer constructor without proper sanitization. This could result in a Denial of Service through the usage of all available CPU resources and data exposure through an uninitialized memory leak in setups where an attacker could submit typed input to the auth parameter. |
| CVE-2014-4650 | CRITICAL | 9.8 | Feb 20, 2020 | The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator. |
| CVE-2014-8089 | CRITICAL | 9.8 | Feb 17, 2020 | SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte. |
| CVE-2015-5741 | CRITICAL | 9.8 | Feb 8, 2020 | The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a request that contains Content-Length and Transfer-Encoding header fields. |
| CVE-2019-14906 | CRITICAL | 9.8 | Jan 7, 2020 | A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue only affects Red Hat SDL packages, SDL versions through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow flaw while copying an existing surface into a new optimized one, due to a lack of validation while loading a BMP image, is possible. An application that uses SDL to parse untrusted input files may be vulnerable to this flaw, which could allow an attacker to make |
| CVE-2014-3585 | CRITICAL | 9.8 | Nov 22, 2019 | redhat-upgrade-tool: Does not check GPG signatures when upgrading versions |
| CVE-2019-18805 | CRITICAL | 9.8 | Nov 7, 2019 | An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6. |
| CVE-2019-14813 | CRITICAL | 9.8 | Sep 6, 2019 | A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands. |
| CVE-2019-11235 | CRITICAL | 9.8 | Apr 22, 2019 | FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve being used" protection mechanism, aka a "Dragonblood" issue, a similar issue to CVE-2019-9498 and CVE-2019-9499. |
Showing the 20 most severe of 832 known CVEs.
Get Third Party SupportRelated Red Hat Products
All Red Hat products →Red Hat Enterprise Linux 9 (Upcoming ELS)
EOSL: May 31, 2036
Red Hat Enterprise Linux 8 (Upcoming ELS)
EOSL: May 31, 2033
Red Hat Enterprise Linux 4
EOSL: Mar 31, 2017
Red Hat Enterprise Linux 10 (Upcoming ELS)
EOSL: May 31, 2039
Red Hat Enterprise Linux 6 (ELS)
EOSL: Jun 30, 2024
Red Hat Enterprise Linux 5 (ELS)
EOSL: Nov 30, 2020