There was discussion here a few months ago about there being no official date for end of life on Lenny. This has changed. I just noticed this item on the security announcement mailing list:
http://lists.debian.org/debian-security-announce/2011/msg00238.html No new Lenny updates after 6 February 2012. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CA+AKB6ELngvZCwqY-b=PUhCF1=Kdf_NRUVvd2FhcQAovh5=_...@mail.gmail.com