Drupal has officially announcing that Drupal 7 will reach its end of life on January 5, 2025. With this final extension, the Drupal Security Team is also adjusting the level of support provided.
Reduced support for moderately critical Drupal 7 issues
Effective August 1, 2023, the Drupal Security Team may choose to publicly post moderately critical and less critical issues affecting Drupal 7 in the public issue queue for resolution, as long as they are not mass-exploitable. (Security risk levels defined.) (This is in addition to the less serious issues covered by PSA-2023-07-12 that are generally safe for public disclosure.)
Drupal 9 and above are not affected by this change. When a security issue affects both Drupal 7 and Drupal 10, for example, the Drupal 10 security advisory may be released without a corresponding Drupal 7 fix, and the Drupal 7 issue made public at that point.
Drupal 7 branches of unsupported modules and themes are no longer eligible for new maintainership
Community support for contributed modules and themes will continue as it has to date. However, beginning August 1, 2023, once the Drupal 7 branch of a contributed module or theme is marked unsupported it will not be eligible for new maintainership and will not be marked supported again. This will be true if an existing maintainer marks the module/theme unsupported, or if the security team marks it unsupported for lack of response. If there are Drupal 7 modules or themes that you or your clients rely on, then we strongly encourage you to adopt these projects proactively.
PHP 5.5 and below will no longer be supported on Drupal 7
Effective August 1, 2023, we will no longer support PHP versions lower than 5.6 for Drupal 7. We may issue further PSAs increasing the minimum PHP requirement any time before Drupal 7's end of life.