On Sat, 24 Oct 2026 17:42:36 GMT, Brent Christian <[email protected]> wrote:

>> This brings in change for 8395690: CA certificate improvements
>> 
>> 
>> 
>> 
>> ---------
>> - [x] I confirm that I make this contribution in accordance with the 
>> [OpenJDK Interim AI Policy](https://openjdk.org/legal/ai).
>
> Brent Christian has updated the pull request with a new target base due to a 
> merge or a rebase. The incremental webrev excludes the unrelated changes 
> brought in by the merge/rebase.

@bchristi-git @rhalade @seanjmullan 

Please elaborate why another JDK security advisory and release was necessary on 
a Saturday.

Is there anything wrong with the previous fix (CVE-2026-91403)? Is this fix 
just a precautionary measure (= distrusting the affected roots)?

-------------

PR Comment: https://git.openjdk.org/jdk/pull/33554#issuecomment-6396851235

Reply via email to