This advisory covers security fixes for the IBM Semeru Runtime Certified Edition 21 and OpenJDK 8 Java Runtime Environment packages in Red Hat Enterprise Linux 7 and 10. The fixes address two vulnerabilities: CVE-2025-53057, which improves certificate handling, and CVE-2025-53066, which enhances path factories. Both vulnerabilities originate from OpenJDK components and were included in the Oracle CPU 2025-10 update. The update is rated as having a moderate security impact by Red Hat Product Security. The advisory provides updated packages for various architectures including x86_64, s390x, ppc64, ppc64le, and aarch64. The vendor advisory includes detailed package information and instructions for applying the update.

The vulnerabilities affect the Java runtime environment's handling of certificates and path factories, potentially impacting security mechanisms relying on these components. The security impact is rated as moderate by Red Hat. There are no reports of known exploits in the wild. The vulnerabilities could potentially allow attackers to bypass certain security checks related to certificate validation or path handling, but no specific exploitation details are provided.

A security update is available and should be applied to affected Red Hat Enterprise Linux 7 Extended Lifecycle Support and Red Hat Enterprise Linux 10 Extended Update Support systems running the IBM Semeru Runtime Certified Edition 21 or OpenJDK 8 packages. The update includes fixes for CVE-2025-53057 and CVE-2025-53066. Users should ensure all previously released errata relevant to their systems are applied before updating. Detailed update instructions are available from Red Hat at https://access.redhat.com/articles/11258. Applying the official update fully mitigates the vulnerabilities.