RHSA-2025:13656HighCVSS 8.6

Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk bug fix and enhancement update

Published
August 11, 2025
Last Modified
October 9, 2026

🔗 CVE IDs covered (4)

CVE-2025-30749 →CVE-2025-30754 →CVE-2025-50059 →CVE-2025-50106 →

📋 Description

CVE-2025-30749 — openjdk: Better Glyph drawing (Oracle CPU 2025-07) CVE-2025-30754 — openjdk: Enhance TLS protocol support (Oracle CPU 2025-07) CVE-2025-50059 — openjdk: Improve HTTP client header handling (Oracle CPU 2025-07) CVE-2025-50106 — openjdk: Glyph out-of-memory access and crash (Oracle CPU 2025-07)

🎯 Affected products22

  • Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-1:21.0.8.0.9-1.el10.aarch64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-1:21.0.8.0.9-1.el10.ppc64le as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-1:21.0.8.0.9-1.el10.s390x as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-1:21.0.8.0.9-1.el10.src as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-1:21.0.8.0.9-1.el10.x86_64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-devel-1:21.0.8.0.9-1.el10.aarch64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-devel-1:21.0.8.0.9-1.el10.ppc64le as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-devel-1:21.0.8.0.9-1.el10.s390x as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-devel-1:21.0.8.0.9-1.el10.x86_64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-headless-1:21.0.8.0.9-1.el10.aarch64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-headless-1:21.0.8.0.9-1.el10.ppc64le as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-headless-1:21.0.8.0.9-1.el10.s390x as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-headless-1:21.0.8.0.9-1.el10.x86_64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-jmods-1:21.0.8.0.9-1.el10.aarch64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-jmods-1:21.0.8.0.9-1.el10.ppc64le as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-jmods-1:21.0.8.0.9-1.el10.s390x as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-jmods-1:21.0.8.0.9-1.el10.x86_64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-src-1:21.0.8.0.9-1.el10.aarch64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-src-1:21.0.8.0.9-1.el10.ppc64le as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-src-1:21.0.8.0.9-1.el10.s390x as a component of Red Hat Enterprise Linux Supplementary (v. 10)
  • java-21-ibm-semeru-certified-jdk-src-1:21.0.8.0.9-1.el10.x86_64 as a component of Red Hat Enterprise Linux Supplementary (v. 10)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (3)