• For one year.

    They’re not eligible to continue to get security updates after that (even though they’ll still be doing them because businesses will).