RHSA-2025:3847MediumCVSS 8.8

Red Hat Security Advisory: OpenJDK 8u452 Windows Security Update

Published
April 16, 2025
Last Modified
October 26, 2026

🔗 CVE IDs covered (4)

CVE-2024-47606 →CVE-2025-21587 →CVE-2025-30691 →CVE-2025-30698 →

📋 Description

CVE-2024-47606 — gstreamer1-plugins-good: integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes CVE-2025-21587 — openjdk: Better TLS connection support (Oracle CPU 2025-04) CVE-2025-30691 — openjdk: Improve compiler transformations (Oracle CPU 2025-04) CVE-2025-30698 — openjdk: Enhance Buffered Image handling (Oracle CPU 2025-04)

🎯 Affected products1

  • Red Hat Build of OpenJDK 8u452

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Do not process untrusted files with the MP4/MOV demuxer and monitor application crashes as this may indicate exploitation attempts. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. For supported affected products, updated OpenJDK packages that remediate this flaw have been delivered through Red Hat errata; users are advised to install the latest available updates. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Updates containing the fix have been released for the affected Red Hat packages; users are advised to update to the latest available versions.

🔗 References (4)