We publish fixes to vulnerabilities in OpenJDK source code four times per year, in January, April, July, and October, on the third Tuesday of the month. We post advisories describing the severity, area, and affected versions of each fix to the vuln-announce mailing list, signed with the advisory key for integrity. We encourage you to update to the latest version of your preferred JDK distribution