The Red Hat build of OpenJDK 21 for Windows has a security update in version 21.0.8 that replaces 21.0.7. This update fixes four security vulnerabilities: CVE-2025-30749 and CVE-2025-50106 address issues with glyph drawing; CVE-2025-30754 improves TLS protocol support; and CVE-2025-50059 enhances HTTP client header handling. The update is classified as important by Red Hat Product Security. No CVSS scores are provided in the advisory, and no known exploits are reported. The update includes both security and bug fixes and is recommended to be applied following prior errata.

The vulnerabilities fixed in this update affect the OpenJDK 21 runtime and SDK on Windows, potentially impacting the security of Java applications relying on this runtime. The issues involve graphical rendering (glyph drawing), TLS protocol handling, and HTTP client header processing, which could affect confidentiality, integrity, or availability depending on exploitation. The advisory does not specify exploitation details or known active attacks. The overall security impact is rated as important by Red Hat.

A security update is available in Red Hat build of OpenJDK 21 version 21.0.8 for Windows, which replaces version 21.0.7. Users should apply this update to address the listed vulnerabilities. Before applying, ensure all previously released errata relevant to the system are installed. Follow Red Hat's official guidance for applying updates as detailed in their documentation. No additional mitigation steps are indicated or required beyond applying this update.