Securing the Future of OpenJFX: January 2026 Critical Patch Update Released



Today marks the release of the January 2026 Critical Patch Update (CPU) for OpenJFX. This coordinated release provides essential security and stability updates for the entire ecosystem, covering the latest development versions as well as our Long Term Support (LTS) versions: OpenJFX 25.0.2, 21.0.10 and 17.0.18.

Professional Stewardship: The Invisible Labor of Security

While OpenJFX remains an open-source framework under GPLv3, the expert labor required to maintain enterprise-grade stability is a significant undertaking. Behind every CPU release like today’s is a rigorous engineering lifecycle:

  • Discovery & Coordination: Working within the broader Java ecosystem to ensure synchronized vulnerability disclosure.
  • The Art of the Backport: Safely integrating modern security fixes into legacy versions without disrupting established production applications.
  • Cross-Platform Validation: Exhaustive stress-testing across Windows, macOS (Intel and Apple Silicon), and Linux to ensure no regressions are introduced.

From ‘Users’ to ‘Partners’: Sustaining the Ecosystem

Our business model at Gluon is built on the philosophy of stewardship. We provide the innovation of OpenJFX for free, but we rely on the organizations that depend on it for their mission-critical infrastructure to support its continued maintenance.

Subscribing to Gluon LTS is more than just a support agreement; it is a commitment to the sustainability of the tools you build on. These partnerships fund the very engineers who monitor threats and prepare these critical updates, ensuring that when a security risk emerges, the response is managed and professional.

Beyond Security: Stability in a Changing OS Landscape

Maintaining a UI framework isn’t just about patching security holes—it’s about staying compatible with the rapidly shifting world of desktop operating systems. From the transition to Apple Silicon to the evolution of graphics APIs like Metal and DirectX, Gluon engineers work to ensure that your JavaFX applications run flawlessly on today’s hardware. Your LTS support allows us to maintain this cross-platform promise, preventing “bit rot” and keeping your desktop client modern.

Thanking Our Partners

We want to extend a sincere thank you to our current LTS partners. Your investment in the framework makes today’s release possible for the entire community. You are the heroes of the OpenJFX ecosystem, ensuring that Java desktop development remains a secure and viable choice for the future.

Get the Release

  • LTS Subscribers: Your production-ready binaries for JavaFX 25, 21 and 17 are available for immediate download via the usual channels.
  • Community Users: You can download SDKs from our website or use the Maven artifacs

If your organization relies on OpenJFX but hasn’t yet institutionalized its support, we invite you to do the “right thing” today. Join the growing list of partners who ensure that OpenJFX remains the most stable UI framework for the Java ecosystem.

Subscribe to Gluon LTS and secure your applications today.