portal entry

Thanks Charlie. Any idea how long until Adobe posts their version of Java 8u212?

Comment by christophern92966137

<p>Good news, Christopher (and all): Adobe has now added at least update 8u212 to the downloads page, though curiously still not 11.0.3. Also curious, they offer only u212 and not u211, for those only wanting the latest security updates and not bug fixes/changes.</p><p>Once I see they have added 11.0.3, I will update this post to strike out the comment about the updates not being there.</p>

Comment by Charlie Arehart

Hi, I started a program, it complained about a wrong Java version and opened a webbrowser on java dot com. There I saw, Oracle released JAVA <em>Version 8 Update 221</em>. Will it be available on https://www.adobe.com/support/coldfusion/downloads.html#additionalThirdPartyInstallers ???   Best, Bernhard

Comment by Bernhard Döbler

<p style="text-align: left">Bernhard, the update was just released by oracle today.</p> Judging by past experience it may be a week before it appears on the cf downloads page. Do you need to wait? I would argue, no. As I said above, the file you would download from oracle (after signing in) has been binary equal to those on the cf downloads page, in the tests I have done. I have still never heard any convincing argument why one MUST use the ones on the cf page, if they are indeed binary the same.

Comment by Charlie Arehart

Hi Charlie,   you are of course right. I only had in mind, that the 16th was a recent date and didnt realize it was just that day. The download on java dot com is placed behind a login. On Adobe's page the download is available without registration.   Best, Bernhard

Comment by Bernhard Döbler

Fair enough, on your first point. :-) On your second, yep, I knew that. I didn't say it in the blog post originally, so I have just updated it to clarify that point. Otherwise, I stand by my assertion.:-)

Comment by Charlie Arehart

<p>As of Java 8 update 261, the JDK/JRE installers available from Adobe are no longer binary identical to the free downloads from Oracle. Adobe download page location as usual is:</p><p><a href="https://www.adobe.com/support/coldfusion/downloads.html#additionalThirdPartyInstallers" rel="nofollow">https://www.adobe.com/support/coldfusion/downloads.html#additionalThirdPartyInstallers</a></p><p>At the minimum, there is a difference in the licence conditions displayed when the installer is run.</p><p>It is now correct to advise all customers that the right thing to do is to download Java 8 updates from Adobe, not Oracle.</p><p> </p>

Comment by Legorol San

<p>Legorol, on what basis are you making your assertion that the installers are “no longer binary identical”? <strong>I just downloaded (for example) the Windows 64-bit installer for Java 8 update 261, from both the Adobe and Oracle sites, and doing a compare <span style="text-decoration: underline;">they are indeed binary identical</span></strong>. I don’t see how you could have gotten a different result and therefore would make this assertion. I look forward to your clarification, for the sake of the discussion.</p>

Comment by Charlie Arehart

<p>Charlie, I am happy to clarify. Let’s use “jdk-8u261-windows-x64.exe” as an example.</p><p>First, let’s look at the download from Adobe, from this link:</p><p><a href="https://www.adobe.com/support/coldfusion/downloads.html#additionalThirdPartyInstallers" rel="nofollow">https://www.adobe.com/support/coldfusion/downloads.html#additionalThirdPartyInstallers</a></p><p>Adobe also provides the checksums here (linked from the download page):</p><p><a href="http://download.macromedia.com/pub/coldfusion/java/java8/8u261/jdk/jdk8u261-checksum.txt" rel="nofollow">http://download.macromedia.com/pub/coldfusion/java/java8/8u261/jdk/jdk8u261-checksum.txt</a></p><p>The checksum is listed as</p><p>jdk-8u261-windows-x64.exe – sha256 – b548f152b59667ed8c9e37f4ed2af642884329af05608a14f7f7ddc133d7c8b3</p><p>and the download from the Adobe page does indeed have that sha256 checksum, I tried just now.</p><p> </p><p>Second, let’s look at the download from Oracle. I used this page, where the free download of JDK 8 is provided:</p><p><a href="https://www.oracle.com/uk/java/technologies/javase/javase-jdk8-downloads.html" rel="nofollow">https://www.oracle.com/uk/java/technologies/javase/javase-jdk8-downloads.html</a></p><p>and Oracle also provides the checksums here (linked from the download page):</p><p><a href="https://www.oracle.com/webfolder/s/digest/8u261checksum.html" rel="nofollow">https://www.oracle.com/webfolder/s/digest/8u261checksum.html</a></p><p>The Oracle version is listed as:</p><p>jdk-8u261-windows-x64.exe sha256: 5517cfb640fa2cb93a5088bebb08be2cbdd23859e051756223c7c554559942d5</p><p>and the download from Oracle does indeed have that checksums, again, I just checked.</p><p>Hence the binaries are different, at least if downloaded from the two pages linked above.</p><p> </p><p>Finally, I tried running both executables, and the wording of the licencing warning that is shown in the first dialog box during setup, is different between the two.</p>

Comment by Legorol San