Red Hat Security Advisory: java-21-openjdk security update
Red Hat has released a security update for the java-21-openjdk package addressing multiple vulnerabilities including issues with glyph drawing, TLS protocol support, and HTTP client header handling. The update also fixes bugs related to screen capture functionality on Wayland systems and stability issues in the G1 garbage collector on NUMA systems. These fixes apply to Red Hat Enterprise Linux versions 8, 9, and 10, as well as related CodeReady Linux Builder variants. The update is rated as important by Red Hat Product Security. No known exploits in the wild have been reported at this time.
AI Analysis
Technical Summary
The Red Hat java-21-openjdk security update addresses four security vulnerabilities: CVE-2025-30749 and CVE-2025-50106 related to glyph drawing improvements, CVE-2025-30754 enhancing TLS protocol support, and CVE-2025-50059 improving HTTP client header handling. Additionally, the update resolves bugs affecting screen capture functionality on Wayland graphical systems by recommending the PipeWire package and fixes a stability issue in the G1 garbage collector on NUMA systems caused by thread migration across NUMA nodes. These fixes are provided for multiple Red Hat Enterprise Linux and CodeReady Linux Builder versions across various architectures. The advisory references official Red Hat documentation for applying the update.
Potential Impact
The vulnerabilities fixed by this update affect the OpenJDK 21 runtime and SDK, potentially impacting applications relying on Java for graphical rendering, secure communications via TLS, and HTTP client operations. The bugs fixed improve system stability and functionality on Wayland graphical environments and NUMA hardware architectures. While the security impact is rated as important, no exploits are currently known in the wild. The update mitigates risks related to incorrect glyph rendering, TLS protocol weaknesses, and HTTP header handling errors, which could otherwise affect application reliability and security.
Mitigation Recommendations
An official security update is available from Red Hat for java-21-openjdk packages on supported Red Hat Enterprise Linux and CodeReady Linux Builder versions. Users should apply this update promptly following Red Hat's published guidance at https://access.redhat.com/articles/11258 to remediate the listed vulnerabilities and bugs. The update also recommends installing the PipeWire package on Wayland systems to restore screen capture functionality. No additional mitigations are indicated by Red Hat beyond applying the provided update.
Red Hat Security Advisory: java-21-openjdk security update
Description
Red Hat has released a security update for the java-21-openjdk package addressing multiple vulnerabilities including issues with glyph drawing, TLS protocol support, and HTTP client header handling. The update also fixes bugs related to screen capture functionality on Wayland systems and stability issues in the G1 garbage collector on NUMA systems. These fixes apply to Red Hat Enterprise Linux versions 8, 9, and 10, as well as related CodeReady Linux Builder variants. The update is rated as important by Red Hat Product Security. No known exploits in the wild have been reported at this time.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Red Hat java-21-openjdk security update addresses four security vulnerabilities: CVE-2025-30749 and CVE-2025-50106 related to glyph drawing improvements, CVE-2025-30754 enhancing TLS protocol support, and CVE-2025-50059 improving HTTP client header handling. Additionally, the update resolves bugs affecting screen capture functionality on Wayland graphical systems by recommending the PipeWire package and fixes a stability issue in the G1 garbage collector on NUMA systems caused by thread migration across NUMA nodes. These fixes are provided for multiple Red Hat Enterprise Linux and CodeReady Linux Builder versions across various architectures. The advisory references official Red Hat documentation for applying the update.
Potential Impact
The vulnerabilities fixed by this update affect the OpenJDK 21 runtime and SDK, potentially impacting applications relying on Java for graphical rendering, secure communications via TLS, and HTTP client operations. The bugs fixed improve system stability and functionality on Wayland graphical environments and NUMA hardware architectures. While the security impact is rated as important, no exploits are currently known in the wild. The update mitigates risks related to incorrect glyph rendering, TLS protocol weaknesses, and HTTP header handling errors, which could otherwise affect application reliability and security.
Mitigation Recommendations
An official security update is available from Red Hat for java-21-openjdk packages on supported Red Hat Enterprise Linux and CodeReady Linux Builder versions. Users should apply this update promptly following Red Hat's published guidance at https://access.redhat.com/articles/11258 to remediate the listed vulnerabilities and bugs. The update also recommends installing the PipeWire package on Wayland systems to restore screen capture functionality. No additional mitigations are indicated by Red Hat beyond applying the provided update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:10873
- Cve Count
- 4
- Additional Cves
- ["CVE-2025-30754","CVE-2025-50059","CVE-2025-50106"]
- Cvss Version
- null
Threat ID: 6a1f4e87e29bf47b500805e4
Added to database: 6/2/2026, 9:43:35 PM
Last enriched: 6/2/2026, 10:05:56 PM
Last updated: 6/3/2026, 4:59:48 AM
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.