The Red Hat build of OpenJDK 11 (version 11.0.28) for Windows with Extended Lifecycle Support includes fixes for five security vulnerabilities: CVE-2025-30749 and CVE-2025-50106 address issues with glyph drawing; CVE-2025-30754 enhances TLS protocol support; CVE-2025-30761 improves scripting support; and CVE-2025-50059 improves HTTP client header handling. This release replaces version 11.0.27 and includes security and bug fixes as well as enhancements. The update is rated as important by Red Hat Product Security. No CVSS scores are provided in the advisory, and no known exploits in the wild have been reported. The update affects multiple Red Hat OpenJDK 11 ELS builds across different hardware architectures.

The vulnerabilities fixed in this update affect the OpenJDK 11 runtime and development kit, potentially impacting applications running on Red Hat OpenJDK 11 ELS Windows builds. The issues involve graphical rendering (glyph drawing), TLS protocol handling, scripting capabilities, and HTTP client header processing, which could affect application stability, security, or data integrity. Red Hat rates the security impact as important (high severity). No known active exploitation has been reported at this time.

An official security update (OpenJDK 11.0.28 ELS) is available from Red Hat and should be applied to affected systems. Users must ensure all previously released errata relevant to their systems are installed before applying this update. Detailed update instructions are available in the Red Hat advisory and documentation. No additional mitigation steps are indicated by the vendor.