This Red Hat security advisory covers the OpenJDK 11.0.28 ELS update for portable Linux builds, which replaces the previous 11.0.27 release. The update includes security fixes for five vulnerabilities impacting the OpenJDK 11 Java Runtime Environment and Software Development Kit. The addressed issues involve improvements to glyph drawing (CVE-2025-30749 and CVE-2025-50106), enhancements to TLS protocol support (CVE-2025-30754), scripting support improvements (CVE-2025-30761), and HTTP client header handling (CVE-2025-50059). Red Hat rates the security impact as Important and recommends updating to this release to mitigate these vulnerabilities. No CVSS scores are provided in the advisory, and no known exploits in the wild have been reported. The update applies to multiple RHEL versions and architectures as specified in the vendor advisory.

The vulnerabilities fixed in this update affect the OpenJDK 11 runtime and SDK, potentially impacting the security of Java applications running on affected Red Hat Enterprise Linux systems. The issues relate to glyph rendering, TLS protocol handling, scripting capabilities, and HTTP client header processing, which could lead to security weaknesses if left unpatched. The advisory does not specify exploitation details or known active exploits. The overall security impact is rated as Important by Red Hat, indicating a significant but not critical risk.

Red Hat has released OpenJDK 11.0.28 ELS as a security update that addresses these vulnerabilities. Users should apply this update to replace version 11.0.27 after ensuring all previously released errata relevant to their systems have been applied. Detailed instructions for applying the update are available in the Red Hat knowledge base article linked in the advisory. No additional mitigation actions are indicated beyond applying the official update.