Hi,
We are using Alma which has the PHP 8.0 distribution. PHP.net stopped releasing security updates and stopped supporting version 8.0 in November 2023.
Does Alma manage and release new security updates for PHP 8.0 (and any other versions that PHP .net no longer supports) even though PHP .net no longer supports this version?
AlmaLinux strives for compatibility with corresponding RHEL. Red Hat maintains packages in RHEL, and their commitment is listed in Red Hat Enterprise Linux Application Streams Life Cycle - Red Hat Customer Portal
That is, RHEL 8 will have application stream php/8.0 until November 2024,
and RHEL 9 will have full life application stream php/8.0 until May 2032.
Red Hat maintains RHEL packages with backports. See Security Backporting Practice - Red Hat Customer Portal and What is backporting and how does it affect Red Hat Enterprise Linux? - Red Hat Customer Portal
If RHEL 9 can have security updates up to 2032, then AlmaLinux 9 should also be able to do so too.
For more extreme example from Red Hat side is RHEL 7. It has kernel that was originally based on Linux kernel 3.10.0. That upstream has been long dead. It has also Python 2.7. Likewise, upstream is dead. Red Hat did commit a decade ago to keep them alive for their RHEL customers.