The pace of Java security updates is set to increase. The industry is moving from the long-standing quarterly rhythm of January, April, July, and October toward more frequent, monthly security releases, and BellSoft is moving with it. As an active OpenJDK contributor, we intend to deliver Liberica JDK and Liberica Native Image Kit security updates on this faster cadence, beginning with an additional release in August alongside the standard July and October updates.
Why it matters: vulnerability discovery has entered a new era. AI-assisted analysis helps researchers, and attackers too, find and weaponize flaws in days rather than months. Every week between a disclosure and a patched runtime is a week of exposure, and a monthly cadence shrinks that window for every Liberica user.
BellSoft typically publishes Liberica releases within 48 hours of the corresponding upstream updates, and we intend to keep that pace as the cadence accelerates. If you ship applications with a bundled Liberica runtime, this is a good time to revisit the full JDK versioning scheme defined in JEP 322, and to make sure your build and deployment tooling correctly handles the emergency patch-release counter used for out-of-cycle security releases.
Watch this blog or sign up for our product alerts for the August release date and further details.
