This Red Hat security advisory covers the OpenJDK 11.0.28 ELS release for Windows builds, which replaces the previous 11.0.27 version. It addresses five security vulnerabilities identified by CVE identifiers CVE-2025-30749, CVE-2025-30754, CVE-2025-30761, CVE-2025-50059, and CVE-2025-50106. These vulnerabilities involve improvements in glyph drawing, TLS protocol support, scripting capabilities, and HTTP client header handling. The advisory rates the update as having an Important security impact and provides a replacement package that includes these fixes along with other bug fixes and enhancements. No CVSS scores are provided in the advisory, and no known exploits in the wild have been reported at this time.

The vulnerabilities fixed in this update affect the OpenJDK 11 runtime and SDK, potentially impacting the security of Java applications running on affected versions. The issues relate to graphical rendering (glyph drawing), TLS protocol handling, scripting support, and HTTP client header processing, which could lead to security weaknesses if exploited. The advisory classifies the security impact as Important (high severity), indicating these issues could be leveraged to compromise confidentiality, integrity, or availability of affected systems if unpatched. No active exploitation is currently known.

A security update to OpenJDK 11.0.28 ELS for Windows builds is available from Red Hat and should be applied to replace version 11.0.27. Before applying this update, ensure all previously released relevant errata have been applied. Follow Red Hat's official guidance for applying updates as detailed in their documentation. No additional mitigations are indicated or required beyond applying this official update.