This Red Hat security advisory (RHSA-2025:10862) addresses four security vulnerabilities in the java-1.8.0-openjdk packages, which include OpenJDK 8 JRE and JDK. The vulnerabilities fixed are: CVE-2025-30749 and CVE-2025-50106 related to glyph drawing improvements, CVE-2025-30754 enhancing TLS protocol support, and CVE-2025-30761 improving scripting support. The advisory also includes a bug fix for java.net.InetAddress.getLocalHost().getHostName() method behavior on IPv4-preferred systems, aligning hostname resolution to return short hostnames consistently across interfaces. The update applies to multiple Red Hat Enterprise Linux 8 and 9 variants, including Extended Update Support and Update Services for SAP Solutions. The vendor rates the update as Important and provides detailed instructions for applying the update. No explicit CVSS scores are included in the advisory, and no known exploits in the wild are reported.

The vulnerabilities addressed impact the Java runtime environment and development kit, potentially affecting glyph rendering, TLS protocol handling, and scripting capabilities. These issues could lead to security weaknesses in applications relying on these Java components. The hostname resolution bug fix improves consistency and correctness in network-related Java calls. Red Hat classifies the overall security impact as Important, indicating a significant but not critical risk. There are no reports of active exploitation in the wild at this time.

Red Hat has released an official security update for java-1.8.0-openjdk packages that addresses these vulnerabilities and bugs. Users should apply this update promptly after ensuring all previously released errata relevant to their systems are installed. Detailed update instructions are available in the Red Hat advisory (RHSA-2025:10862) and associated documentation. No alternative mitigations or workarounds are specified or required beyond applying the update.