Updated OpenJDK packages has been released for both Debian GNU/Linux 9 and 10:
DSA 4485-1: openjdk-8 security updateOpenJDK Updates for Debian 9 and 10
DSA 4486-1: openjdk-11 security update
