I'm on 2025.Q1.0 and don't want to upgrade to 2025.Q1.14...

Confused about Liferay’s patch releases like 2025.Q1.14? You’re not alone. In this post, we clarify what these updates are (think Fix Packs, but easier), why they’re critical for stability and security, and why relying on hotfixes is often more painful than simply applying the latest patch. TL;DR: If you’re on 2025.Q1.0, update to the latest patch release—it’s safe, supported, and saves everyone time.

So recently I was working with a client, they were asking about a problem they were having.

I started with my typical first question which is "What version of Liferay are you using?"

Their response: We're on 2025.Q1.0 LTS.

Which is great, they're right where they need to be, almost.

My goto line in this case (I think it might also be Support's goto line, not sure though) is "Great. Have you tried your issue on 2025.Q1.14?"

At the time of this writing, 1.14 is the latest patch release for 2025.Q1. When you read this, it could be a higher number...

Their response: No, but we're not interested in 2025.Q1.14 as we just did a big upgrade to get to 2025.Q1.0. If it's fixed, can we just get a hotfix from support?

And I realized that, somewhere along the line, the messaging about the patch releases somehow didn't get to the person I was working with...

So here's the deal, folks:

When we do a major release like 2025.Q1, 2025.Q2, 2024.Q1, ..., we will often follow those up with patch releases.

For example, we currently have 2025.Q1.14, 2025.Q2.1, and 2024.Q1.17 as of this writing.

Those patch releases are exactly like the old Fix Packs that we used to provide, they're just automatically applied for you so you don't have to use the command line patching tool.

By exactly the same, that means:

  • They contain bug fixes, performance enhancements and security updates applied to the initial release. And not just for the things that you might have found, but fixes that other clients have found and reported and have been fixed, so you reap the benefits of the fixes for others problems.
  • They do not contain new features, functionality, modules, etc that were not part of the initial release.
  • They should not have any internal or external API changes. I say should not because you can never predict the nature of a bug, yeah? An internal API change might be necessary, but I think those are going to be kind of rare if they ever happen. External APIs though, those will not be changed.
  • They do not require a lengthy upgrade process. You should run the DB upgrade tool, but typically it's not going to have anything to do unless there was a fix that needed to be applied this way.
  • They should not require rebuilding any of your customizations. If you've read any of my other posts on OSGi, you're aware that any specific version number you use is treated by OSGi as a version range, and this range would include any of the patch releases. If you have JSP fragments, you'll want to check those to see if maybe the source JSP was updated somehow, but these are likely rare too.

So doing the patch updates bring a lot to the table, plus it's important to note that you are paying for these as part of your subscription, so not applying them means you're leaving money on the table, yeah?

Of course there are going to be some that ask "Can't I just get a hotfix from Support for this one issue that has been fixed?" The short answer is yes, this is possible, but the longer answer points out that this is really a pain for you as well as for Support...

For you, you have to open a support ticket, explain your issue, and even if you know an LPS number for a fix you want, Support is still going to want to verify things. They're like a pharmacist, wanting to verify that they're giving out the right medicine to solve the right problem to the right person. If they don't do their due diligence, they could provide a hotfix that doesn't fix the real issue forcing you to go back and say "it still didn't work" and then ... Pretty soon you have this long, drawn out issue just to get a working hotfix, and then there's all the effort you need to do to apply it into each environment with the patching tool...

And this is a pain for Support, to be honest. They track every version and hotfix each client has. As you request a new hotfix, they have to build a new custom hotfix for you, one that includes the old hotfix plus the new changes, they have to test it out and resolve any cross-cutting issues, they fully test it to ensure it doesn't break, ... It can be a lot of time and effort for them to do these one-off hotfixes.

Finally, when you are ready to do a bump, say 2025.Q1.0 to only 2025.Q1.3 (instead of Q1.14), you may need a special hotfix from Support that is refactored for Q1.3 (one that excludes any fixes that were applied up to and including Q1.3, but includes fixes from after Q1.3 that might be part of a later Q1.14). Having a hotfix puts roadblocks and dampeners on your ability to update and move forward.

So while it might seem easier to just go with a hotfix, it's often more work than necessary for all involved.

So the TL;DR version of this blog: Apply the patch releases, it is totally safe, won't incur a big upgrade penalty, and it is better for everyone than getting a hotfix.

Hopefully this has cleared up some misconceptions that you might have about the patch release.

Obviously, if you find anything here that ends up being incorrect, we'd love to hear about it. Not because I got any of this wrong, but it would indicate that we might have broken the promise of the patch releases and we need to fix it. Liferay wants these patch releases to be used and wants everyone to know they're safe and ready to go, so if something breaks that promise, they're going to want to resolve it and add more checks to prevent it from occurring again.

Blogs

Hi David,

It's good to upgrade the dot version. But who give ensure and support, help to update without any issues which already fixed by hotfix.

When customer rise ticket for hotfix at that time support team have to convey them to upgrade to latest dot release if very much gap in dot versions.

Suggest to avoid hotfix and help the customer acording to the subscription, then only customer satisfaction is high and also agree with upgradation because Liferay support team help for update, otherwise customer think it time taking and may any issues in future and also payable for upgrading.

According to your description I understand that product team had responsibility to help and do needful action for dot upgradation.

Also I have doubt in hotfix, it may be created according to customer environment and issues, then how dot version handle all user issues.

 

Thanks

Lohita Sagar Mishra.

As partners, clients, and even community find and report issues that turn into fixes, these fixes are applied to the master branch in the git repo, but they also apply to main release branch and, when necessary (i.e. to the LTS releases), they are backported.

When a new patch release for 2025.Q1 comes out, it includes all of these fixes which might be bugs or performance issues, but they're never new/untested features.

Support can help with the application of the patch release when you run into problems, just like they would help with a hotfix installation, so you're not left on your own if something goes awry.

You're right, sometimes Support may require you to update the patch release. This can happen when one ticket is partially fixed by another ticket which is partially fixed by another ticket which is partially fixed by another ... In cases like this, it is too problematic to try and backport individual fixes, so again recommending the patch release update makes things easier for everybody and also less error prone.

There are a few hotfixes which are customer specific and won't be part of the patch releases. These are very much up to Support to determine when/if such a thing is needed. I don't typicallly play a role in that determination so I don't know what goes into that and can't say much about them.

Lets be honest: from Liferay perspective it makes sense, from customer/partner/developer: it does not. Too many times these few tiny hotfixes break something. At the same time effort to test the whole portal is way too high to update after every single patch.

Updates are relatively easy (even with all required code changes), testing updates is not.

 

Don't get me wrong: Liferay has made a big step into right direction recently but many of us still remember "the good old days" ;)

I would never try to claim the update processes, whether hotfixes or patch releases, will guarantee success or come without any effort on the implementors part to test or even that we get things right 100% of the time.

But I will say that generally you will be better off getting those bug fixes and performance improvements, etc. into your platform rather than leaving yourself exposed.

And Liferay Support will work with you to ensure that (especially if we don't get it right) we make it right.

Liferay can't do anything about the effort implementors will need to do to handle updates. Some people at Liferay think it is as simple as "Client just has to apply patch and start environment and they're done"; they haven't been in the real world that applies rigid Software Configuration Management (SCM) processes requiring full testing and promotion of even the smallest changes to the environments...

Regardless what that level of effort is on your part (and trust me, I am aware of some pretty heavyweight SCM processes out there), I would still argue that you will be more protected, more stable, more resilient when you can apply the patch releases, work through whatever SCM processes your organization requires, but have that updated code running on your platform.

Why? It can save you time and issues by avoiding bugs that have been reported and fixed for others. It can improve your platform performance by incorporating the performance tuning updates, increasing your capacity and decreasing your response times. And it can make your system more secure by incorporating the security enhancements (even small ones).

So maybe it isn't an easy path, but the ROI on it seems quite obvious.

Hi David, 

Thanks for the interesting and informative post. 

I am notified via email when there is a new quarterly release but is there a way to be notified when a new patch has been made available?