The latest OpenJDK 8 security updates ships an updated /etc/java-11-openjdk/security/java.security. We've puppetised that file, so we need to review the new settings and update our puppetised version.
Diff has been stored at https://phabricator.wikimedia.org/P19029