This Red Hat security advisory (RHSA-2025:13656) upgrades the IBM Semeru Runtime Certified Edition 21 runtime environment to version 21.0.8+9 to fix multiple security vulnerabilities (CVE-2025-30749, CVE-2025-30754, CVE-2025-50059, CVE-2025-50106). The vulnerabilities involve weaknesses categorized under CWE-122 (Heap-based Buffer Overflow), CWE-325 (Missing Required Cryptographic Step), and CWE-201 (Information Exposure). The advisory affects Red Hat Enterprise Linux 10 and its Extended Update Support variants on x86_64, s390x, ppc64le, and aarch64 architectures. The update is distributed as RPM packages and source RPMs. No detailed CVSS metrics are provided, but the issues are rated as high severity by Red Hat Product Security. No known exploits in the wild have been reported at the time of the advisory.

The vulnerabilities fixed by this update potentially allow attackers to exploit memory corruption (heap-based buffer overflow), bypass cryptographic protections, or gain unauthorized information disclosure. These issues could lead to compromised confidentiality, integrity, or availability of systems running the affected IBM Semeru Runtime Certified Edition 21. The high severity rating indicates significant risk if left unpatched. However, no active exploitation has been reported so far.

A fixed version of the IBM Semeru Runtime Certified Edition 21 runtime environment is available as version 21.0.8+9 in the java-21-ibm-semeru-certified-jdk package for Red Hat Enterprise Linux 10 and its Extended Update Support variants. Users should apply this update promptly to remediate the vulnerabilities. Detailed instructions for applying the update are available at Red Hat's official update article (https://access.redhat.com/articles/11258). No alternative mitigations or workarounds are specified in the advisory.