Red Hat issued a security advisory (RHSA-2025:10865) for the java-11-openjdk packages with Extended Lifecycle Support on RHEL 7, 8, and 9. The advisory addresses five security vulnerabilities impacting OpenJDK 11, including improvements to glyph drawing (CVE-2025-30749, CVE-2025-50106), TLS protocol support (CVE-2025-30754), scripting support (CVE-2025-30761), and HTTP client header handling (CVE-2025-50059). The advisory does not provide CVSS scores but classifies the severity as important/high. No explicit patch version numbers are provided in the advisory content, but updated packages are available for the affected RHEL versions. The advisory instructs users to apply this update after ensuring all prior errata are applied. No known exploits in the wild are reported at this time.

The vulnerabilities affect the security and functionality of the OpenJDK 11 runtime and development environment on Red Hat Enterprise Linux 7, 8, and 9. Issues include potential weaknesses in glyph rendering, TLS protocol handling, scripting capabilities, and HTTP client header processing. These could lead to security risks such as improper handling of data or protocol flaws, potentially impacting confidentiality, integrity, or availability of Java applications running on affected systems. The advisory classifies the severity as important, indicating a significant security impact requiring timely remediation.

Red Hat has released updated java-11-openjdk packages with Extended Lifecycle Support for RHEL 7, 8, and 9 that address these vulnerabilities. Users should apply this security update after confirming that all previously released errata relevant to their system have been installed. Detailed instructions for applying the update are available at Red Hat's official documentation (https://access.redhat.com/articles/11258). Since this is an on-premises product, remediation requires manual update by system administrators. No indication of 'no action required' or 'already mitigated' is present in the advisory.