This Red Hat security advisory covers the OpenJDK 8u462 update for portable Linux builds, which replaces the previous 8u452 release. It addresses four security vulnerabilities identified by CVE-2025-30749, CVE-2025-30754, CVE-2025-30761, and CVE-2025-50106, involving improvements in glyph drawing, TLS protocol support, and scripting capabilities. A bug fix corrects the java.net.InetAddress.getLocalHost().getHostName() method to consistently return the short hostname across IPv4 and IPv6 interfaces, aligning behavior across platforms. The advisory does not provide CVSS scores but rates the update as important. No known exploits in the wild have been reported. The update is available from Red Hat and replaces the previous OpenJDK 8u452 build.

The vulnerabilities addressed affect the OpenJDK 8 runtime and SDK, potentially impacting Java applications running on affected versions. The issues relate to graphical rendering (glyph drawing), TLS protocol enhancements, and scripting support, which could affect application stability or security. The bug fix improves hostname resolution consistency, which may affect networked Java applications relying on this method. No known exploits in the wild have been reported, and the severity is rated as important by Red Hat.

Red Hat has released an official security update in OpenJDK 8u462 that replaces the previous 8u452 build. Users should apply this update to receive the security and bug fixes. Before applying this update, ensure all previously released relevant errata are applied. Detailed update instructions are available at Red Hat's official documentation. No additional mitigation steps are indicated beyond applying the update.