Hi Bastien, On Fri, Aug 1, 2025 at 4:05 AM Bastien Roucaries <ro...@debian.org> wrote: > * 11 is ok : > https://salsa.debian.org/openjdk-team/openjdk/-/blob/openjdk-11/debian/JB-jre-headless.postinst.in#L129 > * 17 is ok : > https://salsa.debian.org/openjdk-team/openjdk/-/blob/openjdk-17/debian/JB-jre-headless.postinst.in#L97 > * nvidia-openjdk-8-jre is not ok and it does not use ca-certificates-java
Just had a word with Vladimir - looks like it doesn't depend on the usual certs package, which is bad as it's using its own baked certs? Anyway, that means you don't have to worry about it - only 11 and 17 need updating. - u
