The java-1.8.0-openjdk packages for Red Hat Enterprise Linux have multiple security vulnerabilities affecting glyph rendering, TLS protocol support, and scripting capabilities. These are tracked under CVE-2025-30749, CVE-2025-30754, CVE-2025-30761, and CVE-2025-50106. The update also corrects a hostname resolution inconsistency related to IPv4 and IPv6 stack preferences. Red Hat has released a security update (RHSA-2025:10862) addressing these issues for various RHEL 8 and 9 versions and associated products. The advisory classifies the impact as important/high severity but does not provide CVSS scores. No exploits are currently known in the wild. The update is not for a cloud service and must be applied by system administrators.

The vulnerabilities fixed by this update affect the OpenJDK 8 runtime and SDK on Red Hat Enterprise Linux systems, potentially impacting glyph rendering, TLS protocol handling, and scripting support. The advisory rates the security impact as important (high severity). No known exploits in the wild have been reported. The hostname resolution bug fix improves consistency but is not a security vulnerability. The overall impact is to reduce the risk of security issues in Java applications running on affected Red Hat systems.

Red Hat has released an official security update (RHSA-2025:10862) that addresses these vulnerabilities. System administrators should apply this update promptly to affected Red Hat Enterprise Linux versions and related products. Before applying, ensure all previously released errata are installed. Detailed update instructions are available from Red Hat's official documentation. No additional mitigation actions are indicated by the vendor advisory.