The Red Hat build of OpenJDK 17 for Windows has been updated to version 17.0.16 to address several security vulnerabilities. These include improvements to glyph drawing (CVE-2025-30749 and CVE-2025-50106), enhancements to TLS protocol support (CVE-2025-30754), and improvements in HTTP client header handling (CVE-2025-50059). The update replaces the previous 17.0.15 release and includes additional bug fixes and enhancements. The advisory does not provide CVSS scores but rates the update as having an important security impact. No known exploits in the wild have been reported. Users are advised to apply this update after ensuring all prior errata are applied.

The vulnerabilities addressed affect the OpenJDK 17 runtime and SDK on Windows, potentially impacting the security of Java applications using this runtime. The issues relate to graphical rendering, TLS protocol handling, and HTTP client header processing, which could affect application stability or security. The Red Hat advisory rates the security impact as important, indicating a significant but not critical risk. No active exploitation has been reported.

Red Hat has released OpenJDK 17.0.16 for Windows as a security update that includes fixes for the identified vulnerabilities. Users should apply this update to replace version 17.0.15 after ensuring all previously released errata are installed. Detailed update instructions are available in the Red Hat knowledge base article https://access.redhat.com/articles/11258. No additional mitigations are specified beyond applying this official update.