Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk bug fix and enhancement update
Affects Red Hat java-21-ibm-semeru-certified-jdkSource GCVE Database
Mentioned vulnerabilities
Not known to be exploited : upgrade the Red Hat redhat/java-21-ibm-semeru-certified-jdk package to 10 when convenient.
Data as of 26 Oct 2026, 09:08 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 20% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 10
Exploitation evidence
Disclosed: evidence found.
CVE published 21 May 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade the Red Hat redhat/java-21-ibm-semeru-certified-jdk package to 10.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
Red Hatredhat/java-21-ibm-semeru-certified-jdkpkg:rpm/redhat/java-21-ibm-semeru-certified-jdkOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A patch is available from Red Hat to remediate these vulnerabilities. Users of Red Hat Enterprise Linux 10 and its Extended Update Support versions should apply the java-21-ibm-semeru-certified-jdk update as described in the Red Hat advisory RHSA-2025:8063. Follow the vendor's official guidance at https://access.redhat.com/articles/11258 for detailed update instructions. No additional mitigation actions are specified by the vendor.
Description
Multiple security flaws have been identified in the IBM Semeru Runtime Certified Edition 21 runtime environment as packaged in Red Hat Enterprise Linux 10. These vulnerabilities are addressed in a moderate severity update released by Red Hat. The update fixes CVE-2025-21587, CVE-2025-30698, and CVE-2025-2900. The advisory covers various architectures including x86_64, s390x, ppc64le, and aarch64. A patch is available to remediate these issues.