-
Bug
-
Resolution: Can't Do
-
Undefined
-
None
-
rhel-8.6.0
-
None
-
Moderate
-
rhel-sst-idm-cs
-
ssg_idm
-
None
-
False
-
-
None
-
None
-
None
-
None
-
If docs needed, set a value
-
-
x86_64
-
None
Description of problem:
When Checking the RHEL 8, we see two Java 1.8 and Java 11 are installed, By looking at the requirements we saw that both are dependencies of Candlepin.
Why older java 1.8 is still being needed on RHEL 8? Multiple java versions are not good from the security point of view.
[root@satellite ~]# rpm -q --requires tomcatjss
apache-commons-lang3
java-1.8.0-openjdk-headless
jpackage-utils >= 0:1.7.5-15
jss >= 4.9.0
jss < 5.0.0
pki-servlet-engine >= 1:9.0.7
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(FileDigests) <= 4.6.0-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
rpmlib(PayloadIsXz) <= 5.2-1
slf4j
slf4j-jdk14
[root@satellite ~]# cat /etc/redhat-release
Red Hat Enterprise Linux release 8.6 (Ootpa)
[root@satellite ~]# rpm -q --requires candlepin
/usr/bin/bash
/usr/libexec/platform-python
config(candlepin) = 4.1.14-1.el8sat
java-11 >= 1:11.0.0
javapackages-tools
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(FileDigests) <= 4.6.0-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
tomcatjss >= 7.2.1-7.1
wget
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
1.
2.
3.
Actual results:
root@satellite ~]# rpm -q --requires tomcatjss
apache-commons-lang3
java-1.8.0-openjdk-headless <-----------------
jpackage-utils >= 0:1.7.5-15
jss >= 4.9.0
jss < 5.0.0
pki-servlet-engine >= 1:9.0.7
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(FileDigests) <= 4.6.0-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
rpmlib(PayloadIsXz) <= 5.2-1
slf4j
slf4j-jdk14
Expected results:
A similar java version or newer java should be used in the tomcatjss package.
Additional info: