This doesn't look like a vulnerability, but a patch to revoke the indian CA certificates that were found to be generated with a weak key, more info here: https://openjdk.org/groups/vulnerability/advisories/2026-10-21