OpenJDK 11.0.4 Released

Andrew John Hughes gnu.andrew at
Wed Jul 17 03:44:46 UTC 2019

We are pleased to announce the release of OpenJDK 11.0.4.

The source tarball is available from:


The tarball is accompanied by a digital signature available at:


This is signed by our Red Hat OpenJDK key (openjdk at

PGP Key: rsa4096/0x92EF8D39DC13168F (hkp://
Fingerprint = CA5F 11C6 CE22 644D 42C6  AC44 92EF 8D39 DC13 168F

SHA256 checksums:


The checksums can be downloaded from:


What's New?
* Security fixes
  - S8208698, CVE-2019-2745: Improved ECC Implementation
  - S8212328, CVE-2019-2762: Exceptional throw cases
  - S8213431, CVE-2019-2766: Improve file protocol handling
  - S8213432, CVE-2019-2769: Better copies of CopiesList
  - S8216381, CVE-2019-2786: More limited privilege usage
  - S8217563: Improve realm maintenance
  - S8218863: Better endpoint checks
  - S8218873: Improve JSSE endpoint checking
  - S8218876, CVE-2019-7317: Improve PNG support options
  - S8219775: Certificate validation improvements
  - S8220517: Enhanced GIF support
  - S8221345, CVE-2019-2818: Better Poly1305 support
  - S8221518, CVE-2019-2816: Normalize normalization
  - S8222678, CVE-2019-2821: Improve TLS negotiation
* Other fixes
  - S6913047: Long term memory leak when using PKCS11 and JCE exceeds 32
bit process address space
  - S8139178: Wrong fontMetrics when printing in Landscape (OpenJDK)
  - S8163805: hotspot/test/serviceability/sa/sadebugd/
failed with timed out
  - S8170494: JNI exception pending in PlainDatagramSocketImpl.c
  - S8174691: [TESTBUG] A number of native hotspot unit tests fail when
executed in stand-alone mode
  - S8179098: Crypto AES/ECB encryption/decryption performance
regression (introduced in jdk9b73)
  - S8181143: Introduce diagnostic flag to abort VM on too long VM
  - S8188133: C2: Static field accesses in clinit can trigger
  - S8190361: Incorrect version info in jaccessinspector.exe and
  - S8195793: Remove GTE CyberTrust Global Root
  - S8200286: (testbug) MOptionTest test fails with
java.lang.AssertionError: Classfiles too old!
  - S8200613: SA: jstack throws UnmappedAddressException with a CDS core
  - S8201317: X25519/X448 code improvements
  - S8201633: Problems with AES-GCM native acceleration
  - S8202353: os::readdir should use readdir instead of readdir_r
  - S8202414: Unsafe write after primitive array creation may result in
array length change
  - S8202651: Test fails
  - S8202794: Native Unix code should use readdir rather than readdir_r
  - S8202884: SA: Attach/detach might fail on Linux if debugee
application create/destroy threads during attaching
  - S8203627: Swing applications with JRadioButton and JCheckbox fail to
render correctly when using GTK3 and the GTK L&F
  - S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java fails
when running in CDS mode
  - S8205574: Loop predication "assert(f <= 1 && f >= 0) failed
Incorrect frequency"
  - S8205611: Improve the wording of LinkageErrors to include module and
class loader information
  - S8206955: MethodHandleProxies.asInterfaceInstance does not support
default methods
  - S8207340: (fs) UnixNativeDispatcher close and readdir usages should
be fixed
  - S8207748: Fix for 8202794 breaks tier1 builds
  - S8207760: SAXException: Invalid UTF-16 surrogate detected: d83c ?
  - S8208634: Add x-IBM-1129 charset
  - S8208648: ECC Field Arithmetic Enhancements
  - S8208702:
javax/swing/reliability/ may hang on
  - S8208996: X11 icon window color handing bug
  - S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler seems to
use WeakHashMap incorrectly
  - S8209414: AArch64: method handle invocation does not respect JVMTI
interp_only mode
  - S8209415: Fix JVMTI test failure HS202
  - S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry on failure
  - S8209914: javadoc search sometimes generates bad URIs
  - S8209951: Problematic sparc intrinsic:
  - S8210008: custom extension for make/SourceRevision.gmk
  - S8210197: javac can't tell during speculative attribution if a
diamond expression is creating an anonymous inner class or not
  - S8210283: Support git as an SCM alternative in the build
  - S8210320: PPC64: Fix uninitialized variable in C1 LIR assembler code
  - S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
  - S8210483: AssertionError in DeferredAttr at setOverloadKind caused
by JDK-8203679
  - S8210519: build/releaseFile/ failed additional
sources found
  - S8210739: Calling JSpinner's setFont with null throws
  - S8210782: Upgrade HarfBuzz to the latest 2.3.1
  - S8210803: Compilation failure in codeBlob.cpp for Windows 32-bit
  - S8210837: Add libXrandr-devel to the Linux devkits
  - S8210863: Remove Xrandr include files from JDK sources
  - S8210880: Remove HPKeysym.h from JDK sources
  - S8210886: Remove references in to non-existent files.
  - S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32 mistakenly
set the crc32 value into size field
  - S8211266: [TESTBUG] failed intermittently in
ZipFSTester.checkRead(): bound must be positive
  - S8211350: Remove jprt support
  - S8211393: Memory leak issue on awt_InputMethod.c
  - S8211435: Exception in thread "AWT-EventQueue-1"
java.lang.IllegalArgumentException: null source
  - S8211698: Crash in C2 compiled code during execution of double array
heavy processing code
  - S8211810: X11 Time stamp data should be unsigned
  - S8211826: StringIndexOutOfBoundsException happens via
  - S8211841: [testbug] sun/nio/cs/OLD/ does not compile (aix)
  - S8211969: test/jdk/lib/security/ searching
for wrong paths
  - S8211971: Move security/cacerts/ and
  - S8212202: [Windows] Exception if no printers are installed.
  - S8212205: VM asserts after CDS archive has been unmapped
  - S8212562: To remove lib/security from test/jdk/TEST.groups
  - S8212676: AWT SystemColor setting on CDE
  - S8212677: X11 default visual support for IM status window on VNC
  - S8212678: Windows IME related patch
  - S8212794: IBM-964 is required for AIX default charset
  - S8212828: (process) Provide a way for Runtime.exec to use
posix_spawn on linux
  - S8213015: Inconsistent settings between JFR.configure and
  - S8213213: Remove src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
  - S8213232: Unix/X11 setCompositionEnableNative issue
  - S8213292: Input freezes after MacOS key-selector (press&hold) usage
on macOS Mojave
  - S8213294: Upgrade IANA LSR data
  - S8213515: Improve freetype detection on linux/ppc64/ppc64le/s390x
  - S8213614: DnD operation change feature does not work with 64bit big
endian CPU
  - S8213617: JFR should record the PID of the recorded process
  - S8213618: IBM970 charset has missing entry and remove unexpected entries
  - S8213825: assert(false) failed: Non-balanced monitor enter/exit!
Likely JNI locking
  - S8213944: Fix AIX build after the removal of Xrandr.h and add a
configure check for it
  - S8214002: Cannot use italic font style if the font has embedded bitmap
  - S8214109: XToolkit is not correctly displayed color on 16-bit high
color setting
  - S8214111: There is no icon in all JOptionPane target image
  - S8214112: The whole text in target JPasswordField image are not selected
  - S8214252: Expanded & Collapsed nodes of a JTree look the same on GTK3
  - S8214253: Tooltip is transparent rather than having a black background
  - S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
  - S8214533: IBM-29626C is required for AIX default charset
  - S8214765: All TrayIcon MessageType icons does not show up with gtk3
option set
  - S8214935: Upgrade IANA LSR data
  - S8215026: Incorrect amount of memory unmapped with
  - S8215123: Crash in runtime image built with jlink --compress=2
  - S8215284: Reduce noise induced by periodic task getFileSize()
  - S8215296: do not disable c99 on Solaris
  - S8215342: [Zero] Build fails after JDK-8200613
  - S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while using
Swing-FX interop
  - S8215374: 32-bit build failures after JDK-8181143 (Introduce
diagnostic flag to abort VM on too long VM operations)
  - S8215398: -Xlog option usage => Invalid decorator '\temp\app_cds.log'.
  - S8215443: The use of TransportContext.fatal() leads to bad coding style
  - S8215472: (zipfs) Cleanups in implementation classes of jdk.zipfs
and tests
  - S8215707: [macosx] fix pthread_getschedparam and
pthread_setschedparam calls
  - S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate() computes
wrong IDOM
  - S8215790: Delegated task created by SSLEngine throws
  - S8216045: The size of key_exchange may be wrong on FFDHE
  - S8216355: missing NULL checks in libnet in interface iteration and
potential resource leak in getMacAddress
  - S8216556: Unnecessary liveness computation with JVMTI
  - S8216577: Add GlobalSign's R6 Root certificate
  - S8216597: SIGBUS in
Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after JDK-6913047
  - S8216970: condy causes JVM crash
  - S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak) after
JDK-8216597 (SIGBUS error in getNativeKeyInfo)
  - S8217094: HttpClient SSL race if a socket IOException is raised
before ALPN is available
  - S8217263: Automate DashOffset test
  - S8217311: Improve Exception thrown when MulticastSocket.setInterface
fails on AIX(Unix)
  - S8217564: idempotent protection missing in crc32c.h
  - S8217647: JFR: recordings on 32-bit systems unreadable
  - S8217690: Update public suffix version
  - S8217707: JNICALL declaration breaks Splash screen functions
  - S8217765: Internal Error (javaCalls.cpp:61)
guarantee(thread->can_call_java()) failed
  - S8217786: Provide virtualization related info in the hs_error file
on linux s390x
  - S8217878: ENVELOPING XML signature no longer works in JDK 11
  - S8217879: hs_err should print more instructions in hex dump
  - S8217880: AIX build issue after JDK-8214533
  - S8218020: Fix version number in 3rd party legal file
  - S8218060: JDK-8217786 breaks build due to remaining unused function
  - S8218063: JDK-8218060 breaks build for S390
  - S8218152: [javac] fails and exits with no error if a bad annotation
processor provided
  - S8218469: JSlider display issue with slider for GTKLookAndFeel
  - S8218470: JScrollBar display issue with GTKLookAndFeel
  - S8218472: JProgressBar display issue with GTKLookAndFeel
  - S8218473: JOptionPane display issue with GTKLookAndFeel
  - S8218479: JTextPane display issue with GTKLookAndFeel
  - S8218618: Program fails when using JDK addressed by UNC path and
using Security Manager
  - S8218629: XML Digital Signature throws NAMESPACE_ERR exception on
OpenJDK 11, works 8/9/10
  - S8218674: HTML Tooltip with "img=src" on component doesn't show
  - S8218733: SA: CollectedHeap provides broken implementation for
used() and capacity()
  - S8218781: Localized names for Japanese era Reiwa in COMPAT provider
  - S8218811: replace open by os::open in hotspot coding
  - S8218854: FontMetrics.getMaxAdvance may be less than the maximum
  - S8218960: CONFIG level logging statements printed in even when default log Level is INFO
  - S8218991: s390: Add intrinsic for GHASH algorithm
  - S8219006: AArch64: Register corruption in slow subtype check
  - S8219011: Implement MacroAssembler::warn method on AArch64
  - S8219112: name_and_sig_as_C_string usages in frame_s390 miss
  - S8219335: "failed: unexpected type" assert failure in
ConnectionGraph::split_unique_types() with unsafe accesses
  - S8219389: Delegated task created by SSLEngine throws
  - S8219414: SA: jhsdb jsnap throws UnmappedAddressException with core
generated by gcore
  - S8219448: split-if update_uses accesses stale idom data
  - S8219460: ppc: adjust NativeGeneralJump::insert_unconditional to
stack allocated MacroAssembler
  - S8219566: JFR did not collect call stacks when
MaxJavaStackTraceDepth is set to zero
  - S8219574: Minimal VM build failure after JDK-8219414
  - S8219582: PPC: Crash after C1 checkcast patched and GC
  - S8219584: Try to dump error file by thread which causes safepoint
  - S8219698: aarch64: SIGILL triggered when specifying unsupported
hardware features
  - S8219710: Bump update version for OpenJDK: jdk11.0.4
  - S8219746: Provide virtualization related info in the hs_error file
on linux ppc64 / ppc64le

  - S8219915: [TESTBUG] Fix test
in Standalone mode
  - S8219918: ProblemList hotspot tests failing in SAP testing.
  - S8220165: Encryption using GCM results in RuntimeException- input
length out of bound
  - S8220166: Performance regression in deserialization (4-6% in SPECjbb)
  - S8220198: Lots of com/sun/crypto/provider/Cipher tests fail on
x86_32 due to missing SHA512 stubs
  - S8220281: IBM-858 alias name is missing on IBM00858 charset
  - S8220293: Deadlock in JFR string pool
  - S8220349: The fix done for JDK-8214253 have caused issues in JTree
  - S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot without
  - S8220374: C2: LoopStripMining doesn't strip as expected
  - S8220441: [PPC64] Clobber memory effect missing for memory barriers
in atomics
  - S8220495: Update GIFlib library to the 5.1.8
  - S8220513: Wrapper Key may get deleted when closing sessions in
SunPKCS11 crypto provider
  - S8220625: tools/javac/classreader/8171132/
failed with "did not see expected error"
  - S8220707: [TESTBUG] serviceability/sa/
fails with jtreg -vmoption:-Xmx < 8g
  - S8220714: C2 Compilation failure when accessing off-heap memory
using Unsafe
  - S8220718: Missing ResourceMark in nmethod::metadata_do
  - S8220781: linux-s390 : os::get_summary_cpu_info gives bad output
  - S8220794: PPC64: Fix signal handler for SIGSEGV on branch to illegal
  - S8221083: [ppc64] Wrong oop compare in C1-generated code
  - S8221175: Fix bad function case for controlled JVM crash on PPC64
  - S8221244: Unexpected behavior of PropertyDescription.getReadMethod
for boolean properties
  - S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard to use
  - S8221304: Problem list java/awt/FontMetrics/
  - S8221400: java/lang/String/ test requests too much heap
  - S8221401: java/math/BigInteger/ test should
be disabled on 32-bit platforms
  - S8221412: lookupPrintServices() does not always update the list of
Windows remote printers
  - S8221437:
== m()) failed: Should not change after link resolution
  - S8221470: Print methods in exception messages in java-like Syntax.
  - S8221479: Fix JFR profiling on s390
  - S8221483: fails due to "Multiple garbage collectors
  - S8221535: add steal tick related information to hs_error file [linux]
  - S8221610: Resurrect (legacy) JRE bundle target
  - S8221639: [i386] expand_exec_shield_cs_limit workaround is undefined
code after JDK-8199717
  - S8221833: Readability check in Symbol::is_valid not performed for
some addresses
  - S8221870: use driver to run CtwRunner in applications/ctw tests
  - S8221880: Better customization for Windows RC properties
FileDescription and ProductName
  - S8221915: cleanup ticks related coding in os_perf_aix.cpp [aix]
  - S8221917: serviceability/sa/ fails on 32-bit platforms
  - S8221924: get(null) on single-entry unmodifiable Map returns null
instead of throwing NPE
  - S8222027: java/util/logging/LogManager/
generates intermittent ClassCastException
  - S8222032: x86_32 fails with "wrong size of mach node" on AVX-512 machine
  - S8222089: [TESTBUG] sun/security/lib/cacerts/
fails due to cert within 90-day expiry window
  - S8222133: Add temporary exceptions for root certs that are due to
expire soon
  - S8222136: Remove two Comodo root CA certificates that are expiring
  - S8222137: Remove T-Systems root CA certificate
  - S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to garbled
  - S8222410:
java/nio/file/attribute/BasicFileAttributeView/UnixSocketFile hangs when
"nc" does not accept "-U"
  - S8222522: Add configure options for Mac Bundle creation
  - S8222532: (zipfs) Performance regression when writing ZipFileSystem
entries in parallel
  - S8222913: Add Jib support for VERSION_EXTRA*
  - S8222930: ConcurrentSkipListMap.clone() shares size variable between
original and clone
  - S8223266: PPC64: Check for branch to illegal address before checking
for mem serialization
  - S8223395: PPC64: Improve comments in the JVM signal handler to match
ISA text
  - S8223499: Remove two DocuSign root certificates that are expiring
  - S8223555: Cleanups in cacerts tests
  - S8223597: jdk/nio/zipfs/ RuntimeException:
CHECK_FAILED! (getAttribute.crc <entries20> failed 6af4413c vs 0 ...)
  - S8223665: SA: debugd options should follow jhsdb style
  - S8224474: harfbuzz 2.3.1 code fails to compile with gcc 4.4.7
  - S8224671: AArch64: mauve System.arraycopy test failure
  - S8224727: Problem list test
  - S8224828: aarch64: rflags is not correct after safepoint poll
  - S8224880: AArch64: java/javac error with AllocatePrefetchDistance
  - S8225402: events logging in deoptimization.cpp should go to deopt-log
  - S8225716: G1 GC: Undefined behaviour in
  - S8226876: Assertion in sun/util/locale/provider/CalendarDataUtility
on Windows after JDK-8218960
  - S8226880: Backport of JDK-8208698 (Improved ECC Implementation)
should not bring parts of JDK-8205476 (KeyAgreement#generateSecret is
not reset for ECDH based algorithm)

Andrew :)

Senior Free Java Software Engineer
Red Hat, Inc. (

PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://
Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222

More information about the jdk-updates-dev mailing list