We discovered this bug as well and it is indeed the result of the patch applied in S8195874.
To be precise the patch is here: https://hg.openjdk.java.net/jdk/jdk/rev/27135de165ac But upstream OpenJDK applied a follow-up: https://hg.openjdk.java.net/jdk/jdk/rev/f54dcfc5a5f8 The second patch defines a default ("true") for "jdk.net.URLClassPath.disableClassPathURLCheck". @Erich: This is why this problem currently only applies to Debian's openjdk-8 build. For now the only available workarounds are downgrading to a previous build or setting the property. Best regards, Jonas