What you need to know
Canonical gives each Ubuntu LTS five years of standard security maintenance for Main packages. Ubuntu 20.04 reached that end in May 2025 and 22.04 reaches it in May 2027; after that, security fixes need Ubuntu Pro’s Expanded Security Maintenance or an upgrade to 24.04 or 26.04.
Potentially affected
Servers, virtual machines, containers and appliances running Ubuntu, including vendor-supplied video, access control and monitoring servers built on Ubuntu LTS.
DSE recommendation
DSE recommends inventorying every Ubuntu release in use and setting an upgrade or ESM decision date for each 20.04 and 22.04 system.
Canonical gives each Ubuntu LTS five years of standard security maintenance for Main packages. Ubuntu 20.04 reached that end in May 2025 and 22.04 reaches it in May 2027; after that, security fixes need Ubuntu Pro’s Expanded Security Maintenance or an upgrade to 24.04 or 26.04.
Source facts
Canonical’s release cycle page says LTS releases come every two years and receive 5 years of standard security maintenance, with CVE patches for packages in the Main repository, while interim releases get only 9 months of updates. Ubuntu 26.04 LTS was released in April 2026 with standard maintenance to May 2031; 24.04 LTS runs to May 2029 and 22.04 LTS to May 2027.
Ubuntu 20.04 LTS standard security maintenance ended in May 2025; with Ubuntu Pro, Expanded Security Maintenance continues to May 2030. Ubuntu 18.04 ESM runs to May 2028.
Expanded Security Maintenance, available through Ubuntu Pro, provides 10 years of security updates for Main and adds security coverage for the Universe repository, and a Legacy add-on extends coverage to 15 years in total. Ubuntu Pro is free for personal use on up to five machines.
Applicability
Use this for any Ubuntu LTS system, including appliances where the vendor controls the operating system. Vendor appliances follow the vendor’s own support policy, so ask whether their Ubuntu base is upgraded or covered.
DSE recommendation
DSE recommends inventorying every Ubuntu release in use and setting an upgrade or ESM decision date for each 20.04 and 22.04 system. Treat 20.04 machines without Ubuntu Pro as unsupported now, schedule 22.04 upgrades to finish before May 2027, and check which packages come from Universe, since standard maintenance covers Main. Ask appliance vendors in writing how and when their Ubuntu base will be updated.
Verification
Collect the release version from each system with a configuration management or inventory tool, compare it with the support dates above, and confirm Ubuntu Pro attachment status on any system relying on ESM. Repeat the check quarterly.
Official reference
Canonical — Ubuntu release cycle. Reviewed October 18, 2026.
Review the official source
Canonical — Ubuntu release cycle · Verified October 18, 2026
Need help applying this guidance safely?
DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.
Talk with DSE