Azul to roll out monthly security updates for Java LTS versions from August
The enterprise Java platform provider says the new monthly security patch cycle is designed to help organisations respond faster to emerging cyber threats while maintaining production stability.
Scott Sellers, co-founder and CEO of Azul, said enterprises increasingly require both rapid security updates and production stability as AI-driven threats continue to evolve.
NEW DELHI: Enterprise Java platform provider Azul has announced that it will begin delivering monthly Critical Security Patch Updates (CSPUs) for all supported Java Long-Term Support (LTS) versions from August 2026, replacing the conventional quarterly update cycle with a faster security-focused release schedule.
The company said the monthly update cadence will apply to Azul Core and Azul Prime across Java 8, 11, 17, 21 and 25, as well as the current Java 26 release. Security updates will also be extended to supported Java 6 and Java 7 versions used by enterprises running legacy applications.
According to Azul, the move reflects the changing cybersecurity landscape, where artificial intelligence is accelerating both the discovery and exploitation of software vulnerabilities. The company said waiting up to 90 days for the next quarterly patch can leave organisations exposed to security risks.
Under the new schedule, security-only updates will be released on the third Tuesday of each month whenever high-priority vulnerabilities require immediate attention. The company said the updates will focus exclusively on security fixes rather than feature enhancements or unrelated code changes, helping enterprises reduce the risk of application regressions while addressing critical Common Vulnerabilities and Exposures (CVEs).
Scott Sellers, co-founder and CEO of Azul, said enterprises increasingly require both rapid security updates and production stability as AI-driven threats continue to evolve. He said the company’s monthly security-only update model is intended to deliver both objectives without compromising operational reliability.
Azul said it will continue contributing to the OpenJDK community and the OpenJDK Vulnerability Group while supporting organisations that rely on Java for mission-critical enterprise applications. The company added that the new update cadence is designed to simplify security patch management while reducing operational disruption for enterprise IT teams.
