Oracle intends to provide Java security updates more frequently than the current quarterly CPU cadence of January, April, July, and October.


More at https://blogs.oracle.com/java/transitioning-java-to-more-frequent-security-updates.