USN-4892-1: OpenJDK vulnerability
It was discovered that OpenJDK incorrectly verified Jar signatures. An
attacker could possibly use this issue to bypass intended security
restrictions when using Jar files signed with a disabled algorithm.
Source: USN-4892-1: OpenJDK vulnerability