Security vulnerability affects the openjdk11 package. The BN mod sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli.