diff --git a/ci/linux-install-jdk.sh b/ci/linux-install-jdk.sh
index 849afd737..1c714eab5 100755
--- a/ci/linux-install-jdk.sh
+++ b/ci/linux-install-jdk.sh
@@ -9,15 +9,15 @@ install_jdk() {
   baseurl=https://download.oracle.com/java/21/archive/
   major_version=21
   baseurl="https://download.oracle.com/java/${major_version}/archive/"
-  version=21.0.11
+  version=21.0.12
   if uname -m | grep aarch64; then
     tarball=jdk-${version}_linux-aarch64_bin.tar.gz
     # checksum from https://download.oracle.com/java/${major_version}/archive/jdk-${version}_linux-aarch64_bin.tar.gz.sha256
-    sha=2ebe89cad767abba83fb0b8cedd2d2d9bcbf947315fde78f7263a57a24f43b96
+    sha=a666a601e229215642e8dbd060d866d4925b58b68c0f7f1bd475765bab94e193
   else
     tarball=jdk-${version}_linux-x64_bin.tar.gz
     # checksum from https://download.oracle.com/java/${major_version}/latest/jdk-${version}_linux-x64_bin.tar.gz.sha256
-    sha=e1c25a83f9e2e374c93e0c29cc3d98a947621ae0fefa4a8d932951eb160c47c3
+    sha=33cc8a4ba4163b003bbf3516824861ee49e7295e6a2879ec91316c2aead78b80
   fi
   wget --quiet "$baseurl$tarball"
   echo "$sha  $tarball" | sha256sum --check -
diff --git a/deps-packaging/leech2/cfbuild-leech2.spec b/deps-packaging/leech2/cfbuild-leech2.spec
index 948c4ba7d..4d2992dd1 100644
--- a/deps-packaging/leech2/cfbuild-leech2.spec
+++ b/deps-packaging/leech2/cfbuild-leech2.spec
@@ -1,4 +1,4 @@
-%define leech2_version 5.4.2
+%define leech2_version 5.4.3
 
 Summary: CFEngine Build Automation -- leech2
 Name: cfbuild-leech2
diff --git a/deps-packaging/leech2/distfiles b/deps-packaging/leech2/distfiles
index 1afe10c8c..6ab291b9d 100644
--- a/deps-packaging/leech2/distfiles
+++ b/deps-packaging/leech2/distfiles
@@ -1 +1 @@
-ba4ca80b66499040823b7abf454ea4344a3c5cf7d69eb726f531c829e75e0649  leech2-5.4.2.tar.gz
+9455efb989937dae41f5ce4b9cd99cb879273978923a58289c500e144beb62ac  leech2-5.4.3.tar.gz
diff --git a/deps-packaging/leech2/source b/deps-packaging/leech2/source
index 2e3af4187..182317991 100644
--- a/deps-packaging/leech2/source
+++ b/deps-packaging/leech2/source
@@ -1 +1 @@
-https://github.com/larsewi/leech2/releases/download/v5.4.2/
+https://github.com/larsewi/leech2/releases/download/v5.4.3/