Java roundup advances JDK 28 proposal and fixes Quarkus vulnerabilities
Quarkus users get fixes for known security flaws, while Open Liberty teams can begin testing JDK 27 compatibility.
Java platform teams have advanced a JDK 28 startup proposal, issued a Quarkus security update and introduced a JDK 27 compatibility preview in Open Liberty, with implications for runtime performance, vulnerability exposure and compatibility testing. JEP 544 is now Proposed to Target for JDK 28, with its review due to wrap up on September 28, 2026. Quarkus 3.39.5 fixes 32 CVEs affecting components across its ecosystem. Open Liberty 26.0.0.10 offers beta support for JDK 27. Jakarta EE 12’s Core Profile is slated to arrive before JakartaOne Livestream on December 1st, while Jakarta CRaC is gathering community feedback ahead of a vote on its creation.
Why it matters
For operators, the Quarkus update reduces known security exposure, while Liberty teams can start compatibility checks without treating JDK 27 support as final. The JDK and Jakarta items remain proposals, reviews or planned releases, so they mark work in progress rather than changes already broadly delivered.
Signal or noise?
Does this story matter, or is it hype? Decide before you see what everyone else thinks.
Sources
- InfoQ