Security update for java-1_8_0-openj9
This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual machine: - CVE-2024-21094: Fixed C2 compilation failure with 'Exceeded _node_regs array' (bsc#1222986). - CVE-2024-21011: Fixed long Exception message leading to crash (bsc#1222979). - CVE-2024-21085: Fixed Pack200 excessive memory allocation (bsc#1222984). - CVE-2024-21068: Fixed integer overflow in C1 compiler address generation (bsc#1222983).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual machine: - CVE-2024-21094: Fixed C2 compilation failure with 'Exceeded _node_regs array' (bsc#1222986). - CVE-2024-21011: Fixed long Exception message leading to crash (bsc#1222979). - CVE-2024-21085: Fixed Pack200 excessive memory allocation (bsc#1222984). - CVE-2024-21068: Fixed integer overflow in C1 compiler address generation (bsc#1222983).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1213470
- https://bugzilla.suse.com/1222979
- https://bugzilla.suse.com/1222983
- https://bugzilla.suse.com/1222984
- https://bugzilla.suse.com/1222986
- https://www.suse.com/security/cve/CVE-2024-21011
- https://www.suse.com/security/cve/CVE-2024-21068
- https://www.suse.com/security/cve/CVE-2024-21085
- https://www.suse.com/security/cve/CVE-2024-21094
- https://www.suse.com/support/update/announcement/2024/suse-su-20241793-1/