Semantic Security Active or Passive attacks?
The initial notion of semantic security from Goldwasser and Micali has been shown to be euqivalent to what we call today indistinguishability under chosen plaintext attacks (IND-CPA). Yes, that's the only security against a passive adversary and actually the weakest reasonable security notion that we use today.
The authors of the second paper you link seem to use the term semantically secure in a slightly misleading way in the cited part of the paper. What they actually mean is a much stronger notion which is better known as indistinguishability under adaptively chosen-ciphertext attacks (IND-CCA2), which covers active adversaries.
However, this &quot;wording&quot; the authors are using seems to be used by various authors in the way that semantically secure against is seen to be equal to providing indistinguishability under. Also, it is common that when only saying semantically secure, then one means IND-CPA, i.e., a passive adversary. But if one says semantically secure against (adaptively) chosen message attacks, then (IND-CCA1) IND-CCA2 is meant, i.e., an active adversary.
If you read in some parts of the remainder of the second paper you cite from, you will find the correct use:

Under the assumption that this inverting problem is hard, we investigated, in the random oracle mode, how to convert this hard problem into the hard problem of breaking the indistinguishability of encryption with CCA2.