Openssl 3.x — End of Life

EOL soon
EOL: Nov 1, 2026in 129d7 releases in this series0 CVEs

Openssl 3.x — All releases

VersionReleasedActive supportEOL dateLatest patchStatus
3.6Oct 1, 2025Nov 1, 20263.6.3Active
3.5LTSApr 8, 2025Apr 8, 20303.5.7Active
3.4Oct 22, 2024Oct 22, 20263.4.6Active
3.3Apr 9, 2024Apr 9, 20263.3.7EOL
3.2Nov 23, 2023Nov 23, 20253.2.6EOL
3.1Mar 14, 2023Mar 14, 20253.1.8EOL
3.0LTSSep 7, 2021Sep 7, 20263.0.21EOL soon

CVEs affecting Openssl 3.x (0)

No CVEs tracked for Openssl 3.x.

Openssl 3.x will reach end of life — migrate to Openssl 4.x

Openssl 4.x is the next major release. Plan your upgrade before Openssl 3.x stops receiving security patches.

See Openssl 4.x

Frequently asked questions

Is Openssl 3 end of life?

Partially. Some Openssl 3.x releases have reached EOL. Check the version table above for the exact status of each sub-release.

What CVEs affect Openssl 3?

No CVEs are currently tracked for Openssl 3.x in our database. This may mean no vulnerabilities have been recorded yet, or the data is still syncing.

What is the latest Openssl 3 version?

The latest Openssl 3.x patch release is 3.6.3, released on June 9, 2026. Always run the latest patch to benefit from all security fixes.

How to migrate from Openssl 3 to Openssl 4?

To migrate from Openssl 3 to Openssl 4: (1) review the official Openssl 4 migration guide for breaking changes, (2) update dependencies and configuration accordingly, (3) test thoroughly in a staging environment, (4) deploy with a rollback plan. Starting early gives you time to resolve compatibility issues before your current version reaches end of life.

Is it safe to run Openssl 3 in production?

Openssl 3 is still supported and safe for production use until November 1, 2026. Ensure you are running the latest patch version (3.6.3) to have all security fixes applied.

Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA