OpenJDK 11.0.5 Released

Andrew John Hughes gnu.andrew at
Wed Oct 16 13:10:20 UTC 2019

We are pleased to announce the release of OpenJDK 11.0.5.

The source tarball is available from:


The tarball is accompanied by a digital signature available at:


This is signed by our Red Hat OpenJDK key (openjdk at

PGP Key: rsa4096/0x92EF8D39DC13168F (hkp://
Fingerprint = CA5F 11C6 CE22 644D 42C6  AC44 92EF 8D39 DC13 168F

SHA256 checksums:


The checksums can be downloaded from:


What's New?
* Security fixes
  - S8209901: Canonical file handling
  - S8213429, CVE-2019-2933: Windows file handling redux
  - S8218573, CVE-2019-2945: Better socket support
  - S8218877: Help transform transformers
  - S8220186: Improve use of font temporary files
  - S8220302, CVE-2019-2949: Better Kerberos ccache handling
  - S8221497: Optional Panes in Swing
  - S8221858, CVE-2019-2958: Build Better Processes
  - S8222684, CVE-2019-2964: Better support for patterns
  - S8222690, CVE-2019-2962: Better Glyph Images
  - S8223163: Better pattern recognition
  - S8223505, CVE-2019-2973: Better pattern compilation
  - S8223518, CVE-2019-2975: Unexpected exception in jjs
  - S8223886: Add in font table referene
  - S8223892, CVE-2019-2978: Improved handling of jar files
  - S8224025: Fix for JDK-8220302 is not complete
  - S8224062, CVE-2019-2977: Improve String index handling
  - S8224532, CVE-2019-2981: Better Path supports
  - S8224915, CVE-2019-2983: Better serial attributes
  - S8225286, CVE-2019-2987: Better rendering of native glyphs
  - S8225292, CVE-2019-2988: Better Graphics2D drawing
  - S8225298, CVE-2019-2989: Improve TLS connection support
  - S8225597, CVE-2019-2992: Enhance font glyph mapping
  - S8226765, CVE-2019-2999: Commentary on Javadoc comments
  - S8227601: Better collection of references
  - S8228825, CVE-2019-2894: Enhance ECDSA operations
* Other changes
  - S6996807: FieldReflectorKey hash code computation can be improved
  - S8076988: reevaluate trivial method policy
  - S8087128: C2: Disallow definition split on MachCopySpill nodes
  - S8133489: Better messaging for PKIX path validation matching
  - S8139965: Hang seen when using
  - S8147502: Digest is incorrectly truncated for ECDSA signatures when
the bit length of n is less than the field size
  - S8148188: Enhance the security libraries to record events of interest
  - S8163363: AArch64: Stack size in tools/launcher/ needs
to be adjusted
  - S8163511: Allocation of compile task fails with assert: "Leaking
compilation tasks?"
  - S8170639: [Linux] jsig is limited to a maximum of 64 signals
  - S8177899: Tests fail due to code cache exhaustion on machines with
many cores
  - S8180901: Transformer.reset() resets the state only once
  - S8193234: When using -Xcheck:jni an internally allocated buffer can leak
  - S8194231: java/net/DatagramSocket/ failed with Address already in use: Cannot bind
  - S8196681: Java Access Bridge logging and debug flags dynamically
  - S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
  - S8200365: of
'-XX:TLABWasteTargetPercent=100' fails intermittently
  - S8200400: Restrict Sasl mechanisms
  - S8202035: Archive the set of ModuleDescriptor and ModuleReference
objects for observable system modules with unnamed initial module.
  - S8202252: (aio) Closed AsynchronousSocketChannel keeps completion
handler alive
  - S8202952: C2: Unexpected dead nodes after matching
  - S8203629: Produce events in the JDK without a dependency on jdk.jfr
  - S8204203: Many pkcs11 tests failed in Provider initialization, after
compiler on Windows changed
  - S8204521:
compiler/jsr292/ fails
trying to delete temp file
  - S8205421: AARCH64: StubCodeMark should be placed after alignment
  - S8205654: serviceability/dcmd/framework/ timed out
  - S8206074:
is timing out
  - S8206879: Currency decimal marker incorrect for Peru
  - S8207965: C2-only debug build fails
  - S8208269: Javadoc does not support module-info in a multi-release jar
  - S8208499: NMT: Missing memory tag for Safepoint polling page
  - S8208655: use JTreg skipped status in hotspot tests
  - S8208701: Fix for JDK-8208655 causes test failures in CI tier1
  - S8208706: compiler/tiered/ fails
to compile
  - S8208780: (se) test SelectWithConsumer.testReadableAndWriteable():
  - S8209186: Rename SimpleThresholdPolicy to TieredThresholdPolicy
  - S8209413: AArch64: NPE in clhsdb jstack command
  - S8209420: Track membars for volatile accesses so they can be
properly optimized
  - S8209684: Intrinsics that assume some input non null should use
  - S8209939: [testbug][ppc] Test SafepointPollingPages fails after
8208499 with UseSIGTRAP on.
  - S8210063: ZGC: Enable load barriers for IN_NATIVE runtime barriers
  - S8210130: java/net/httpclient/ failed
  - S8210314: [aix] NMT does not show "Safepoint" memory type
  - S8210389: C2: assert(n->outcnt() != 0 || C->top() == n ||
n->is_Proj()) failed: No dead instructions after post-alloc
  - S8210390: C2 still crashes with "assert(mode ==
ControlAroundStripMined && use == sfpt) failed: missed a node"
  - S8210408: Refactor java.util.ResourceBundle:i18n shell tests to
plain java tests
  - S8210729: Clean up macosx static library handling
  - S8210919: Remove statically linked libjli on Windows
  - S8210926:
  - S8210985: Update the default SSL session cache size to 20480
  - S8211097: aix: fix build after JDK-8210919
  - S8211232: GraphKit::make_runtime_call() sometimes attaches wrong
memory state to call
  - S8211233: MemBarNode::trailing_membar() and
MemBarNode::leading_membar() need to handle dying subgraphs better
  - S8211727: Adjust default concurrency settings for running tests on Sparc
  - S8212528: Wrong cgroup subsystem being used for some CPU Container
  - S8212970: TZ database in "vanguard" format support
  - S8212992: Change mirror accessor in Klass::verify_on() to use
  - S8213017: jspawnhelper: need to handle pipe write failure when
sending return code
  - S8213117: adoptNode corrupts attribute values
  - S8213134: AArch64: vector shift failed with MaxVectorSize=8
  - S8213172: CDS and JFR tests fail with assert(JdkJfrEvent::is(klass))
failed: invariant
  - S8213325: (props) Properties.loadFromXML does not fully comply with
the spec
  - S8213406: (fs) More than one instance of built-in FileSystem
observed in heap
  - S8213561: ZipFile/ timed out in tier1
  - S8213734: SAXParser.parse(File, ..) does not close resources when
Exception occurs.
  - S8214003: Limit default test jobs based on memory size
  - S8214096: passes null parameter, so
JCE validation fails
  - S8214161: java.lang.IllegalAccessError: class
jdk.internal.event.X509CertificateEvent (in module java.base) cannot
access class jdk.jfr.internal.handlers.EventHandler (in module jdk.jfr)
because module java.base does not read module jdk.jfr
  - S8214287: SpecJbb2005StressModule got uncaught exception
  - S8214579: JFrame does not paint content in XVFB / X11vnc environment
  - S8214687: Optimize Collections.nCopies().hashCode() and equals()
  - S8214702: Wrong text position for whitespaced string in printing
Swing text
  - S8214770: java/time/test/java/time/format/
failed in non-english locales.
  - S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
  - S8214857: "bad trailing membar" assert failure at memnode.cpp:3220
  - S8215044: C2 crash in loopTransform.cpp with assert(cl->trip_count()
> 0) failed: peeling a fully unrolled loop
  - S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
  - S8215265: C2: range check elimination may allow illegal out of bound
  - S8215281: Use String.isEmpty() when applicable in java.base
  - S8215380: Backout accidental change to String::length
  - S8215451: JNI IsSameObject should not keep objects alive
  - S8215483: Off heap memory accesses should be vectorized
  - S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094: Better
loading of classloader classes
  - S8215534: [testbug] some jfr test don't check @requires vm.hasJFR
  - S8215694: keytool cannot generate RSASSA-PSS certificates
  - S8215756: Memory leaks in the AWT on macOS
  - S8215792: AArch64: String.indexOf generates incorrect result
  - S8215879: AArch64: ReservedStackAccess may leave stack guard in
inconsistent state
  - S8215901: [TESTBUG] fails
  - S8215961: jdk/jfr/event/os/ fails on AArch64
  - S8215982: (tz) Upgrade time-zone data to tzdata2018i
  - S8216039: TLS with BC and RSASSA-PSS breaks ECDHServerKeyExchange
  - S8216046: test/jdk/java/beans/PropertyEditor/ failing
  - S8216155: C4819 warning at libfreetype sources on Windows
  - S8216199: Local variable arg defined but never used in
  - S8216205: Java API documentation formatting error in System.getEnv
  - S8216261: Javap ignores default modifier on interfaces
  - S8216326: SSLSocket stream close() does not close the associated socket
  - S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
  - S8216401: Allow "file:" URLs in Class-Path of local JARs
  - S8216427: ciMethodData::load_extra_data() does not always unpack the
last entry
  - S8216528:
failing with Xcomp
  - S8216549: Mismatched unsafe access to non escaping object fails
  - S8216562: UnknownBodyLength sometimes fails due to "Connection reset
by peer"
  - S8216987: ciMethodData::load_data() unpacks MDOs with non-atomic copy
  - S8216989:
CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier() does
not check for zero length on AARCH64
  - S8217093: Support extended-length paths in parse_manifest.c on windows
  - S8217344: Make comparison overflow-aware in
  - S8217359: C2 compiler triggers SIGSEGV after transformation in
  - S8217364: Custom URLStreamHandler for jrt or file protocol can
override default handler
  - S8217366: ZoneStrings are not populated for all the Locales
  - S8217368: AArch64: C2 recursive stack locking optimisation not triggered
  - S8217371: Incorrect LP64 guard in after JDK-8210764 (Update
avx512 implementation)
  - S8217576: C1 atomic access handlers use incorrect decorators
  - S8217676: Upgrade libpng to 1.6.37
  - S8217760: C2: Missing symbolic info on a call from intrinsics when
invoked through MethodHandle
  - S8217766: Container Support doesn't work for some Join Controllers
  - S8217785: Padding ParallelTaskTerminator::_offered_termination variable
  - S8217896: Make better use of LCPUs when building on AIX
  - S8217990: C2 UseOptoBiasInlining: load of markword optimized to 0 if
running with -XX:-EliminateLocks
  - S8218163: C2: Continuous deoptimization w/
Reason_speculate_class_check and Action_none
  - S8218185: aarch64: missing LoadStore barrier in
  - S8218201: Failures when vmIntrinsics::_getClass is not inlined
  - S8218280: LineNumberReader throws "Mark invalid" exception if CRLF
straddles buffer.
  - S8218553: Enhance keystore load debug output
  - S8218558: NMT stack traces in output should show mt component for
virtual memory allocations
  - S8218566: NMT: missing memory tag for assert poison page
  - S8218581: Incorrect exception message generation
  - S8218682: [TEST_BUG] DashOffset fails in mach5
  - S8218705: Test sun/tools/jcmd/ fails on Linux
  - S8218715: [TESTBUG] TestUseOptoBiasInliningWithoutEliminateLocks
needs to unlock WhiteBoxAPI
  - S8218721: C1's CEE optimization produces safepoint poll with invalid
debug information
  - S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2 implementation
  - S8218780: Update MUSCLE PCSC-Lite header files
  - S8218879: Keep track of memory accesses originated from Unsafe
  - S8218966: AArch64: String.compareTo() can read memory after string
  - S8219013: Update Apache Santuario (XML Signature) to version 2.1.3
  - S8219241: Provide basic virtualization related info in the hs_error
file on linux/windows x86_64
  - S8219244: NMT: Change ThreadSafepointState's allocation type from
mtInternal to mtThread
  - S8219370: NMT: Move synchronization primitives from mtInternal to
  - S8219513: compiler/codegen/aes/
timeout on Solaris-sparc
  - S8219517: assert(false) failed: infinite loop in PhaseIterGVN::optimize
  - S8219562: Line of code in osContainer_linux.cpp L102 appears unreachable
  - S8219583: Windows build failure after JDK-8214777 (Avoid some GCC
8.X strncpy() errors in HotSpot)
  - S8219635: aarch64: missing LoadStore barrier in
  - S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
  - S8219914: Change the environment variable for Java Access Bridge
logging to have a directory.
  - S8219919: RuntimeStub name lost with PrintFrameConverterAssembly
  - S8219993: AArch64: Compiled CI stubs are unsafely modified
  - S8219997: [TESTBUG] Create test for JFR events in Docker container:
CPU, Memory and Process Info
  - S8220037: Inconsistencies of generated timezone files between
Windows and Linux
  - S8220072: GCC 8.3 reports errors in java.base
  - S8220173: assert(_handle_mark_nesting > 1) failed: memory leak:
allocating handle outside HandleMark
  - S8220227: Host Locale Provider getDisplayCountry returns error
message under non-English Win10
  - S8220313: [TESTBUG] Update base image for Docker testing to OL 7.6
  - S8220341: Class redefinition fails with assert(!is_unloaded())
failed: unloaded method on the stack
  - S8220355: Improve assertion texts and exception messages in
  - S8220570: Additonal trace when native thread creation fails
  - S8220579: [Containers] out of sync with
  - S8220657: JFR.dump does not work when filename is set
  - S8220672: [TESTBUG] TestCPUSets should check that cpuset does not
exceed available cores
  - S8220674: [TESTBUG] MetricsMemoryTester failcount test in docker
container only works with debug JVMs
  - S8220682: Heap dumping and inspection fails with JDK-8214712
  - S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
  - S8221120: CopyOnWriteArrayList.set should always have volatile write
  - S8221220: AArch64: Add StoreStore membar explicitly for Volatile
Writes in TemplateTable
  - S8221253: TLSv1.3 may generate TLSInnerPlainText longer than 2^14+1
  - S8221325: Add information about swap space to print_memory_info() on
  - S8221340: [TESTBUG] fails after fix for
  - S8221342: [TESTBUG] Generate Dockerfile for docker testing
  - S8221407: Windows 32bit build error in libsunmscapi/security.cpp
  - S8221408: Windows 32bit build build errors/warnings in hotspot
  - S8221411: NullPointerException in RasterPrinterJob without
  - S8221434: Fix typo in lib-x11 autoconf error message about missing
  - S8221480: jcmd VM.metaspace shall print limits in basic mode
  - S8221527: [TESTBUG] contains hard-coded
reference to JDK 10
  - S8221529: [TESTBUG] Docker tests use old/deprecated image on AArch64
  - S8221710: [TESTBUG] more configurable parameters for docker testing
  - S8221725: AArch64 build failures after JDK-8221408 (Windows 32bit
build build errors/warnings in hotspot)
  - S8221730: jcmd process name matching broken
  - S8221801: Update src/java.base/share/legal/
  - S8221892: ThreadPoolExecutor: Thread.isAlive() is not equivalent to
not being startable
  - S8221894: Add comments for docker tests in the test doc
  - S8222108: Reduce minRefreshTime for updating remote printer list on
  - S8222154: upgrade gtest to 1.8.1
  - S8222280: Provide virtualization related info in the hs_error file
on AIX
  - S8222299: [TESTBUG] move hotspot container tests to hotspot/containers
  - S8222362: Upgrade to Freetype 2.10.0
  - S8222387: Out-of-bounds access to CPU _family_id_xxx array
  - S8222415: Xerces 2.12.0: Parsing Configuration
  - S8222670: pathological case of JIT recompilation and code cache bloat
  - S8222720: Provide extended VMWare/vSphere virtualization related
info in the hs_error file on linux/windows x86_64
  - S8222743: Xerces 2.12.0: DOM Implementation
  - S8222914: Partial backport of JDK-8218266
  - S8222968: ByteArrayPublisher is not thread-safe resulting in broken
re-use of HttpRequests
  - S8222980: Upgrade IANA Language Subtag Registry to Version 2019-04-03
  - S8222987: sun/security/tools/keytool/ times out on Solaris-SPARC
  - S8222991: Xerces 2.12.0: Validation
  - S8223177: Data race on JvmtiEnvBase::_tag_map in double-checked locking
  - S8223227: Rename acquire_tag_map() to tag_map_acquire() in jvmtiEnvBase
  - S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
  - S8223336: Assert in VirtualMemoryTracker::remove_released_region
when running the test with
  - S8223482: Unsupported ciphersuites may be offered by a TLS client
  - S8223537: testlibrary_tests/ctw/ fails with
Agent timeout frequently
  - S8223553: Fix code constructs that do not compile with the Eclipse
Java Compiler
  - S8223572: ~ThreadInVMForHandshake() should call
  - S8223574: add more thread-related system settings info to hs_error
file on AIX
  - S8223660: jtreg: Decouple Unsafe from RTM tests
  - S8223814: SA: jhsdb common help needs to be more detailed
  - S8224033: os::snprintf should be used in virtualizationSupport.cpp
  - S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler fails
intermittently for case 13 on Windows
  - S8224090: [PPC64] Fix SLP patterns for filling an array with double
float literals
  - S8224165: [TESTBUG] Docker tests produce excessive output
  - S8224181: On child process spawn, child may write to random file
descriptor instead of the fail pipe
  - S8224202: Speed up Properties.load
  - S8224221: add memprotect calls to event log
  - S8224230: [PPC64, s390] Support AsyncGetCallTrace
  - S8224252: [TESTBUG]
hotspot/test/serviceability/sa/sadebugd/ is timing out
again after fix for JDK-8163805
  - S8224487: outputStream should not be copyable
  - S8224531: SEGV while collecting Klass statistics
  - S8224558: Fix replicateB encoding
  - S8224560: (tz) Upgrade time-zone data to tzdata2019a
  - S8224580: Matcher can cause oop field/array element to be reloaded
  - S8224589: Improve startup behavior of SecurityProperties
  - S8224658: Unsafe access C2 compile fails with assert(flat !=
TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr: adr_type =
  - S8224698: does not compile with the
Eclipse Java Compiler
  - S8224825: java/awt/Color/ fails in linux-x64 system
  - S8224838: Bump update version for OpenJDK: jdk-11.0.5
  - S8224991: Problemlist
  - S8225005: Xerces 2.12.0: License file
  - S8225141: Better handling of classes in error state in fast class
initialization checks
  - S8225178: [Solaris] os::signal() should call sigaction() with SA_SIGINFO
  - S8225189: Multiple JNI calls within critical region in ZIP Library
  - S8225257: sun/security/tools/keytool/ timed out
  - S8225347: [s390] Unexpected exit from stack overflow test
  - S8225386: test for JDK-8216261 fails in Windows
  - S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0 cause crash.
  - S8225390: ProblemList
sun/security/pkcs11/sslecc/ due to JDK-8161536
  - S8225423: GTK L&F: JSplitPane: There is no divider shown
  - S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
dependent libraries
  - S8225543: Jcmd fails to attach to the Java process on Linux using
the main class name if whitespace options were used to launch the process
  - S8225580: tzdata2018i integration causes test failures on jdk-13
  - S8225636: SA can't handle prelinked libraries
  - S8225644: C1 dumps incorrect class name in ClassCastException message
  - S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker native function
  - S8225715: jhsdb jmap fails to write binary heap dump of a jshell process
  - S8226409: Enable argument profiling for sun.misc.Unsafe.put*/get*
  - S8226468: [aix] loadquery failed error message displayed
  - S8226530: ZipFile reads wrong entry size from ZIP64 entries
  - S8226543: Reduce GC pressure during message digest calculations in
password-based encryption
  - S8226607: Inconsistent info between and MUSCLE headers
  - S8226798: JVM crash in
klassItable::initialize_itable_for_interface(int, InstanceKlass*, bool,
  - S8226964: [Yaru] GTK L&F: There is no difference between menu
selected and de-selected
  - S8227011: Starting a JFR recording in response to JVMTI VMInit and /
or Java agent premain corrupts memory
  - S8227041: runtime/memory/ has a memory leak
  - S8227117: normal interpreter table is not restored after single
stepping with TLH
  - S8227247: tools/sjavac/ fails with AssertionError:
Error too big on windows
  - S8227277: HeapInspection::find_instances_at_safepoint walks dead objects
  - S8227392: Colors with alpha are painted incorrectly on Linux, after
  - S8227594: sadebugd/ fails due to
"java.rmi.NotBoundException: SARemoteDebugger"
  - S8227630: adjust format specifiers in loadlib_aix.cpp
  - S8227834: build.log output from failing commands : include the
hs_error file path in case of crashes in build
  - S8227869: fix wrong format specifiers in os_aix.cpp
  - S8227919: 8213232 causes crashes on solaris sparc64
  - S8228337: problemList failing/ignored manual tests in security-libs
  - S8228400: Remove built-in AArch64 simulator
  - S8228469: (tz) Upgrade time-zone data to tzdata2019b
  - S8228485: JVM crashes when bootstrap method for condy triggers
loading of class whose static initializer throws exception
  - S8228501: java_props_macosx.c - provide missing CFRelease for
  - S8228578: fix CFData object leak in macosx KeystoreImpl.m
  - S8228585: jdk/internal/platform/cgroup/ -
NumberFormatException because of large long values (memory limit_in_bytes)
  - S8228596: Class redefinition fails when condy instructions are removed
  - S8228601: AArch64: Fix interpreter code at JVMCI deoptimization entry
  - S8228618: s390: c1/c2 fail to add a metadata relocation in the
static call stub.
  - S8228649: [PPC64] SA reads wrong slots from interpreter frames
  - S8228658: test fails on fast Linux
machines with Total safepoint time 0 ms
  - S8228711: Path rendered incorrectly when it goes outside the
clipping region
  - S8228725: AArch64: Purge method call format support
  - S8228764: New library dependencies due to JDK-8222720
  - S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on AArch64
  - S8229352: Use of an uninitialized register in 32-bit ARM template
  - S8229406: ZGC: Fix incorrect statistics
  - S8229767: Typo in Sasl.createClient and Sasl.createServer
  - S8229773: Resolve permissions for code source URLs lazily
  - S8229887: (zipfs) zip file corruption when replacing an existing
STORED entry
  - S8229925: [s390, PPC64] Exception check missing in interpreter
  - S8230085: (fs) FileStore::isReadOnly is always true on macOS Catalina
  - S8230099: Prepare for backport of JDK-8217368

More details:
Andrew :)

Senior Free Java Software Engineer
Red Hat, Inc. (

PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://
Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222

More information about the jdk-updates-dev mailing list