OpenJDK 8u222 Released

Andrew John Hughes gnu.andrew at
Tue Jul 16 21:22:52 UTC 2019

We are pleased to announce the release of OpenJDK 8u222.

The source tarball is available from:


The tarball is accompanied by a digital signature available at:


This is signed by our new Red Hat OpenJDK key (openjdk at

PGP Key: rsa4096/0x92EF8D39DC13168F (hkp://
Fingerprint = CA5F 11C6 CE22 644D 42C6  AC44 92EF 8D39 DC13 168F

SHA256 checksums:


The checksums can be downloaded from:


What's New?
Security fixes
  - S8191073: JpegImageReader throws IndexOutOfBoundsException when
trying to read image data from tables-only image
  - S8208698, CVE-2019-2745: Improved ECC Implementation
  - S8212328, CVE-2019-2762: Exceptional throw cases
  - S8213431, CVE-2019-2766: Improve file protocol handling
  - S8213432, CVE-2019-2769: Better copies of CopiesList
  - S8216381, CVE-2019-2786: More limited privilege usage
  - S8217563: Improve realm maintenance
  - S8218863: Better endpoint checks
  - S8218873: Improve JSSE endpoint checking
  - S8218876, CVE-2019-7317: Improve PNG support options
  - S8219018: Adjust positions of glyphs
  - S8219020: Table alternate substitutions
  - S8219775: Certificate validation improvements
  - S8220192: Better outlook for SecureRandom
  - S8220517: Enhanced GIF support
  - S8221518, CVE-2019-2816: Normalize normalization
  - S8223511, CVE-2019-2842: Extended AES support
Other changes
  - S7100957: SOCKS proxying does not work with IPv6 connections
  - S7102541: RFE: os::set_native_thread_name() cleanups
  - S8019816: [TEST_BUG][macosx]
closed/java/awt/BasicStroke/ not on EDT
  - S8022879: TEST_BUG: sun/nio/cs/ fails
  - S8025209: Intermittent test failure
  - S8030690: TEST_BUG java/nio/Buffer/ fails intermittently
  - S8031113: TEST_BUG:
java/nio/channels/AsynchronousChannelGroup/ fails intermittently
  - S8031145: Re-examine closed i18n tests to see it they can be moved
to the jdk repository.
  - S8031563: TEST_BUG:
java/nio/channels/Selector/ failed once
  - S8031666: TEST_BUG: java/net/ipv6tests/ failed because
of SocketTimeoutException
  - S8040211: Update LSR datafile for BCP 47
  - S8044289: In ImageIO.write() and null stream is not
handled properly.
  - S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can cause
  - S8055705: Rename UnixPrintServiceLookup and Win32PrintServiceLookup
as a platform neutral class name
  - S8055814: [TESTBUG] runtime/NMT/ fails with product
builds due to missing UnlockDiagnosticVMOptions
  - S8059575: JEP-JDK-8043304: Test task: Tiered Compilation level
transition tests
  - S8073078: java/nio/file/FileStore/ sensitive to NFS
  - S8075939: Stream.flatMap() causes breaking of short-circuiting of
terminal operations
  - S8129988: JSSE should create a single instance of the cacerts KeyStore
  - S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to verify
the dump
  - S8135248: Add utility methods to check indexes and ranges
  - S8137231: sun/security/rsa/ timeout with Agent error:
  - S8142493: Utility methods to check indexes and ranges doesn't
specify behavior when function produces null
  - S8143097: java/net/ipv6tests/ fails intermittently with
"checkTime failed: got 1998 expected 4000"
  - S8144332: HSDB could not terminate when close button is pushed.
  - S8146458: Improve exception reporting for
  - S8150013: ParNew: Prune nmethods scavengable list.
  - S8151225: Mark as intermittently failing
  - S8151226: Mark as intermittently failing
  - S8151322: Implement os::set_native_thread_name() on Solaris
  - S8151539: Remove duplicate AlwaysTrueClosures
  - S8153732: Windows remote printer changes do not reflect in
  - S8154156: PPC64: improve array copy stubs by using vector instructions
  - S8154387: Parallel unordered Stream.limit() tries to collect 128
elements even if limit is less
  - S8155794: Move Objects.checkIndex BiFunction accepting methods to an
internal package
  - S8156035: Remove intermittent key from sun/security/rsa/
  - S8157287: java/nio/file/FileStore/ failed with
"java.nio.file.AccessDeniedException : /zones/zoneone/root "
  - S8157792: After Integrating tzdata2016d the
test/sun/util/calendar/zi/ fails for "Asia/Oral" and
"Asia/Qyzylorda" Timezones
  - S8158232: PPC64: improve byte, int and long array copy stubs by
using VSX instructions
  - S8166684: PPC64: implement intrinsic code with vector instructions
for Unsafe.copyMemory()
  - S8171000: Robot.createScreenCapture() crashes in wayland mode
  - S8173910: (fs) java/nio/file/FileSystem/ should
conditionally check FileStores
  - S8176100: [REDO][REDO] G1 Needs pre barrier on dereference of weak
JNI handles
  - S8176237: (fs) java/nio/file/FileStore/ should
conditionally check FileStores
  - S8177472: Remove hard-coded IANA Subtag Registry map in
  - S8179098: Crypto AES/ECB encryption/decryption performance
regression (introduced in jdk9b73)
  - S8181594: Efficient and constant-time modular arithmetic
  - S8182999: SunEC throws ProviderException on invalid curves
  - S8185969: PPC64: Improve VSR support to use up to 64 registers
  - S8187946: Support ISO 4217 Amendments 163 and 164
  - S8189131: Open-source the Oracle JDK Root Certificates
  - S8189949: Remove Baltimore Cybertrust Code Signing CA
  - S8190974: Parallel stream execution within a custom ForkJoinPool
should obey the parallelism
  - S8191031: Remove several Symantec Root CAs
  - S8191404: Upgrading JDK with latest available LSR data from IANA.
  - S8191844: Remove SECOM root (secomevrootca1)
  - S8192854: FONTCONFIG_CFLAGS missing from
  - S8193552: ISO 4217 amendment 165
  - S8193830: Xalan Update: Xalan Java 2.7.2
  - S8195478: sun/text/resources/ fails with
  - S8195774: Add Entrust root certificates
  - S8195793: Remove GTE CyberTrust Global Root
  - S8196141: Add GoDaddy root certificates
  - S8196775: java/net/Socket/asyncClose/ failed intermittently
on Windows with ConnectException: Connection refused
  - S8197546: Fix for 8171000 breaks Solaris + Linux builds
  - S8199779: Add T-Systems, GlobalSign and Starfield services root
  - S8201317: X25519/X448 code improvements
  - S8202026: ISO 4217 amendment 166
  - S8202414: Unsafe write after primitive array creation may result in
array length change
  - S8202651: Test fails
  - S8202768: [macos] Appkit thread slows when any Window Manager active
  - S8202884: SA: Attach/detach might fail on Linux if debugee
application create/destroy threads during attaching
  - S8203190: SessionId.hashCode generates too many collisions
  - S8203228: Branch-free output conversion for X25519 and X448
  - S8203627: Swing applications with JRadioButton and JCheckbox fail to
render correctly when using GTK3 and the GTK L&F
  - S8203872: Upgrading JDK with latest available LSR data from IANA.
  - S8204269: ISO 4217 amendment 167
  - S8204923: Restore Symantec root verisignclass2g2ca
  - S8204929: Fonts with embedded bitmaps are not always rotated
  - S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle both,
  - S8206955: MethodHandleProxies.asInterfaceInstance does not support
default methods
  - S8207760: SAXException: Invalid UTF-16 surrogate detected: d83c ?
  - S8208648: ECC Field Arithmetic Enhancements
  - S8208746: ISO 4217 Amendment #168 update
  - S8209506: Add Google Trust Services GlobalSign root certificates
  - S8209775: ISO 4217 Amendment #169 update
  - S8209951: Problematic sparc intrinsic:
  - S8210153: localized currency symbol of VES
  - S8210416: [linux] Poor StrictMath performance due to non-optimized
  - S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
without optimization
  - S8210432: Add additional TeliaSonera root certificate
  - S8210886: Remove references in to non-existent files.
  - S8210985: Update the default SSL session cache size to 20480
  - S8212202: [Windows] Exception if no printers are installed.
  - S8213183: InputMethod cannot be used after its restarting
  - S8213213: Remove src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
  - S8213294: Upgrade IANA LSR data
  - S8213825: assert(false) failed: Non-balanced monitor enter/exit!
Likely JNI locking
  - S8214109: XToolkit is not correctly displayed color on 16-bit high
color setting
  - S8214111: There is no icon in all JOptionPane target image
  - S8214112: The whole text in target JPasswordField image are not selected
  - S8214252: Expanded & Collapsed nodes of a JTree look the same on GTK3
  - S8214253: Tooltip is transparent rather than having a black background
  - S8214765: All TrayIcon MessageType icons does not show up with gtk3
option set
  - S8214770: java/time/test/java/time/format/
failed in non-english locales.
  - S8214935: Upgrade IANA LSR data
  - S8215982: (tz) Upgrade time-zone data to tzdata2018i
  - S8216577: Add GlobalSign's R6 Root certificate
  - S8217263: Automate DashOffset test
  - S8217315: Proper units should print more significant digits
  - S8217597: [TESTBUG] old version docker does not support --cpus
  - S8218020: Back out accidental changes that belong elsewhere
  - S8218020: Fix version number in 3rd party legal file
  - S8218152: [javac] fails and exits with no error if a bad annotation
processor provided
  - S8218469: JSlider display issue with slider for GTKLookAndFeel
  - S8218470: JScrollBar display issue with GTKLookAndFeel
  - S8218472: JProgressBar display issue with GTKLookAndFeel
  - S8218473: JOptionPane display issue with GTKLookAndFeel
  - S8218479: JTextPane display issue with GTKLookAndFeel
  - S8218674: HTML Tooltip with "img=src" on component doesn't show
  - S8219781: Localized names for Japanese era Reiwa in COMPAT provider
  - S8220349: The fix done for JDK-8214253 have caused issues in JTree
  - S8220495: Update GIFlib library to the 5.1.8
  - S8220718: Missing ResourceMark in nmethod::metadata_do
  - S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard to use
  - S8221412: lookupPrintServices() does not always update the list of
Windows remote printers
  - S8221789: make reconfigure broken (jdk8u only)
  - S8222136: Remove two Comodo root CA certificates that are expiring
  - S8222137: Remove T-Systems root CA certificate
  - S8222670: pathological case of JIT recompilation and code cache bloat
  - S8222965: Backport of JDK-8129988 broke the build
  - S8222975: Fix 'release' file to reflect actual repo checkin used to
compile JDK
  - S8223499: Remove two DocuSign root certificates that are expiring
  - S8223537: testlibrary_tests/ctw/ fails with
Agent timeout frequently
  - S8223555: Cleanups in cacerts tests
  - S8223664: Add jtreg tests for 8223528, backport to jdk8u of 8176100
  - S8223883: Fix jni.cpp copyright date after 8223528
  - S8224560: (tz) Upgrade time-zone data to tzdata2019a
  - S8224727: Problem list test
  - S8225065: Revert 8221166 (8u backport of 8048782)
  - S8225580: tzdata2018i integration causes test failures on jdk-13
  - S8225716: G1 GC: Undefined behaviour in

Andrew :)

Senior Free Java Software Engineer
Red Hat, Inc. (

PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://
Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222

More information about the jdk8u-dev mailing list