The Red Hat build of OpenJDK 21.0.8 for portable Linux addresses four security vulnerabilities: CVE-2025-30749 and CVE-2025-50106 related to glyph drawing improvements, CVE-2025-30754 enhancing TLS protocol support, and CVE-2025-50059 improving HTTP client header handling. These fixes improve the security posture of the Java Runtime Environment and Software Development Kit provided by Red Hat. The update supersedes version 21.0.7 and includes additional bug fixes and enhancements. No CVSS scores are provided in the advisory, and no exploits are known to be active in the wild. The update is classified as important by Red Hat Product Security.

The vulnerabilities fixed in this update affect the OpenJDK 21 runtime and SDK, potentially impacting the security of Java applications running on affected versions. The issues relate to glyph rendering, TLS protocol handling, and HTTP client header processing, which could lead to security weaknesses if left unpatched. The advisory rates the impact as important, indicating a significant but not critical risk. There are no reports of active exploitation in the wild at this time.

Red Hat has released OpenJDK 21.0.8 as a security update that addresses these vulnerabilities. Users should apply this update to replace version 21.0.7 after confirming that all previously released relevant errata have been applied. Detailed update instructions are available from Red Hat's official documentation. No additional mitigation steps are indicated by the vendor advisory.