LTS support
Every Long Term Support release is supported for at least five years — full bug fixes for four years, then security-only fixes in the final year.
OpenSSL ships a feature release every six months and a new Long Term Support release every two years. Here is the release plan, the support lifecycle, and what's coming next — maintained by the team that builds it.
Every Long Term Support release is supported for at least five years — full bug fixes for four years, then security-only fixes in the final year.
Non-LTS feature releases are supported for a minimum of 13 months from their release date (from 3.5 onward).
A new LTS release is designated at least every two years — each odd-numbered April (Apr 2027, Apr 2029, …).
At least two fully supported LTS releases are available at any given time, so teams always have a stable target.
Ships on schedule — April for LTS, October for feature releases.
Every reported bug and security issue is fixed, on every supported platform.
Only security fixes ship in the last year — time to plan the upgrade.
Support ends, but a newer LTS is always live first — no gap.
OpenSSL's versioning scheme has evolved into a semantic versioning system (Major.Minor.Patch) adopted from version 3.x onwards. A Major release allows for incompatible changes that may break existing code, a Minor release adds functionality without breaking backward compatibility, and a Patch release is strictly for bug or security fixes and must not impact existing code. This system was implemented to provide more clarity and predictability compared to the older, non-standard scheme used before version 3, which used letters for patch releases (e.g., 0.9.8a).
A key strategic shift is the team's recent agreement to increase the frequency of major releases. A slow major release cadence in the past led to technical mistakes and debt persisting in the codebase for long periods. With this new approach, the team has established a forward-looking roadmap, with specific dates for future major versions, such as OpenSSL 5.0, now planned for October 2027. The current long-term support (LTS) release is OpenSSL 3.5, supported until 8 April 2030, with the 4.2 LTS release confirmed for April 2027.
Two LTS lines always overlap, so there is always a supported, stable release to target. Once standard support ends, commercial Extended Support keeps older releases patched.