The security advisory RHSA-2025:13675 from Red Hat addresses multiple vulnerabilities in IBM Java SE 8 as packaged in Red Hat Enterprise Linux 8. The update upgrades the java-1.8.0-ibm package to version 8 SR8-FP50, which includes fixes for CVE-2025-30749, CVE-2025-30754, CVE-2025-30761, and CVE-2025-50106. These vulnerabilities are associated with CWE-122 (Heap-based Buffer Overflow) and CWE-325 (Missing Required Cryptographic Step). No CVSS base scores are provided in the advisory, but Red Hat rates the overall security impact as Important. The advisory recommends applying this update after ensuring all previous errata are applied.

The vulnerabilities fixed in this update affect the IBM Java Runtime Environment and Software Development Kit included in Red Hat Enterprise Linux 8. The issues could potentially lead to security risks related to buffer overflows and cryptographic weaknesses. The advisory does not report any known exploits in the wild. The security impact is rated as Important, indicating a high risk that could affect confidentiality, integrity, or availability if exploited.

Red Hat has released an updated package java-1.8.0-ibm version 1.8.0.8.50-1.el8_10 that addresses these vulnerabilities. Users should apply this update to their Red Hat Enterprise Linux 8 systems. Before applying the update, ensure all previously released errata relevant to the system have been applied. Detailed update instructions are available at Red Hat's official documentation. There is no indication that the vulnerabilities are already mitigated or require no action; therefore, applying the update is the recommended remediation.