Is the 1.x support end of life also true for security releases?

Documentation FAQ
1

Yes, Magento will continue to provide security updates to Magento Enterprise Edition 1.13 and 1.14 for 3 years after Magento 2.0 general availability.

2

Magento 1.x will be supported after 2018-11-18.