Java: JDK 28 gets a release date, October patches close dozens of flaws
Oracle is aiming for general availability of JDK 28 on 9 March 2027. The quarterly patches for all supported Java versions arrived at the same time.
Oracle's Mark Reinhold has proposed the release schedule for JDK 28, InfoQ reports: the code forks on 3 December, the first release candidate follows on 4 February and general availability on 9 March 2027. Comments on the schedule are open until 29 October.
Oracle also released its October Critical Patch Update, covering JDK 27.0.1, 25.0.5, 21.0.13, 17.0.21, 11.0.33 and 8u511, among others. Distributors Azul and BellSoft followed with their own updates; Azul counts 53 fixed CVEs. In addition, certificates from Indian certificate authority eMudhra were blocked after eight private keys were leaked.
Anyone managing Java should update now, Charlie Arehart and SmartScope advise in their overviews of the October patches. The ecosystem also saw WildFly 42, with virtual threads in Jakarta Concurrency, and Apache POI 6.0, which requires at least JDK 17.