...

Azul to Announce Monthly Critical Security Patch Updates for Java Across All Supported LTS Versions

LTS Versions

Enterprise Java provider Azul today announced a major shift to monthly Critical Security Patch Updates. Consequently, this new cadence provides faster protection across all supported LTS Versions starting in August 2026. The accelerated release schedule applies to both Azul Core and Azul Prime product lines. Traditional quarterly release cycles leave unpatched vulnerabilities exposed for far too long. Therefore, Azul introduces this monthly strategy to eliminate critical window risks.

Modern Threat Landscapes Require Faster Patching Cadence

AI now enables attackers to discover and exploit software vulnerabilities much faster than before. Thus, waiting up to 90 days for quarterly fixes creates unacceptable enterprise exposure. Azul will ship these vital updates on the third Tuesday of every month. Specifically, this coverage spans active LTS Versions including Java 8, 11, 17, 21, and 25. Furthermore, the company will deliver these monthly updates to legacy LTS Versions like Java 6 and 7. The current Java 26 release will also receive identical monthly security support.

Critically, this model focuses exclusively on security fixes tracked as Common Vulnerabilities and Exposures. By omitting non-security code modifications, Azul drastically reduces regression risks in production setups. Meanwhile, the vendor continues its ongoing collaboration within the OpenJDK Vulnerability Group. This stability-first approach helps companies protect mission-critical LTS Versions without operational disruption.

Scott Sellers, co-founder and CEO of Azul, emphasized the necessity of modernizing update schedules:

“For years, the world’s most demanding enterprises have trusted Azul to deliver security and stability together, and on time,” said Scott Sellers, co-founder and CEO of Azul. “As AI sharply increases the volume of threats enterprises face, enterprises shouldn’t have to choose between the two. Monthly security-only updates are the new standard Azul is setting for how enterprises protect their Java estates.”

 For related updates on digital trust and cybersecurity, explore our SOC News.

News Source: Businesswire.com