Azul releases security updates addressing 53 OpenJDK vulnerabilities
The company says its October release separates security patches from unrelated code changes to reduce disruption, as AI-assisted attacks increase pressure on enterprises to shorten patching cycles.
Azul’s OpenJDK security updates illustrated through a protected enterprise server network. AI-generated representational image.
NEW DELHI: Enterprise Java software provider Azul has released October security updates for Azul Core that it says address all 53 vulnerabilities disclosed in the latest quarterly OpenJDK update.
In an announcement on Wednesday, the company said the vulnerability count was the highest in a single OpenJDK update in more than a decade and approximately seven times the two-year quarterly average of 7.6.
Azul said its security-only updates exclude new features, enhancements and unrelated bug fixes, limiting code changes that could introduce compatibility problems or disrupt applications.
According to the company, the broader OpenJDK quarterly release includes more than 150 non-security code changes alongside vulnerability fixes. Azul’s approach builds security patches on the previous quarter’s stabilised release to reduce the risk of regressions.
The announcement comes amid concern about AI tools accelerating vulnerability discovery and exploitation. Azul said attackers could also combine lower-severity flaws into more consequential attacks, increasing the importance of timely remediation.
Citing its analysis of the US Cybersecurity and Infrastructure Security Agency’s Known Exploited Vulnerabilities catalogue, Azul said 61% of vulnerabilities published in 2025 that were subsequently exploited were added to the catalogue within 30 days of disclosure. Catalogue inclusion records confirmed exploitation and does not necessarily indicate when attacks began.
Azul co-founder and CEO Scott Sellers said enterprises faced growing pressure to close the gap between vulnerability disclosure and patch deployment while maintaining application stability.
Azul Core is a Java SE-compliant OpenJDK distribution certified through the Technology Compatibility Kit. Subscribers receive monthly and quarterly security-only updates, quarterly full updates and out-of-cycle fixes when required for long-term support versions Java 8, 11, 17, 21 and 25.
The company also said it provides backported security fixes for organisations continuing to run Java 6 and 7.
