This Red Hat security advisory updates the IBM Semeru Runtime Certified Edition 21 runtime environment to version 21.0.8+9 to address four security vulnerabilities (CVE-2025-30749, CVE-2025-30754, CVE-2025-50059, CVE-2025-50106). The affected product is the java-21-ibm-semeru-certified-jdk package on Red Hat Enterprise Linux 10 and its extended update support variants across multiple hardware platforms. The vulnerabilities are associated with CWEs including CWE-122 (Heap-based Buffer Overflow), CWE-325 (Missing Required Cryptographic Step), and CWE-201 (Information Exposure). The advisory does not provide CVSS scores or detailed technical impact but classifies the update as important with high severity. The vendor advisory confirms the availability of the update and provides instructions for applying it.

The update addresses four security vulnerabilities in the IBM Semeru Runtime Certified Edition 21 runtime environment used in Red Hat Enterprise Linux 10. The vulnerabilities relate to memory safety, cryptographic process omissions, and information exposure, which could potentially lead to security breaches if exploited. However, no known exploits in the wild have been reported. The severity is rated high by Red Hat, indicating significant potential impact if unpatched.

A fixed version of the java-21-ibm-semeru-certified-jdk package (version 21.0.8+9) is available from Red Hat. Users should apply this update promptly following the instructions in the Red Hat advisory article (https://access.redhat.com/articles/11258). No additional mitigation steps are indicated or required beyond applying the official update.