Source: openjdk-17 Severity: important Version: 17~14-1 Control: affects -1 openjdk-11
OpenJDK includes the OASIS PKCS#11 headers in src/jdk.crypto.cryptoki/share/native/libj2pkcs11/pkcs11*.h. It is unclear whether OASIS IPR is DFSG-free (see #952951). Most probably it is not: https://enterprise.dejacode.com/licenses/public/oasis-ipr-policy-2014/
libnss3-dev contains MPL-2.0 licensed drop-in replacements for the headers, which is already a build dependency and might be used instead.