RHSA-2024:1816: Moderate: OpenJDK 8u412 Windows Security Update

The OpenJDK 8 packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.<br>This release of the Red Hat build of OpenJDK 8 (8u412) for Windows serves as a replacement for the Red Hat build of OpenJDK 8 (8u402) and includes security and bug fixes, and enhancements. For further information, refer to the release notes linked to in the References section.<br>Security Fix(es):<br><li> OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)</li> <li> OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)</li> <li> OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085)</li> <li> OpenJDK: C2 compilation fails with "Exceeded noderegs array" (8317507) (CVE-2024-21094)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat