Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-5064

Older java 1.8 is still being needed on RHEL 8

    • Icon: Bug Bug
    • Resolution: Can't Do
    • Icon: Undefined Undefined
    • None
    • rhel-8.6.0
    • tomcatjss
    • None
    • Moderate
    • rhel-sst-idm-cs
    • ssg_idm
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • If docs needed, set a value
    • None

      Description of problem:
      When Checking the RHEL 8, we see two Java 1.8 and Java 11 are installed, By looking at the requirements we saw that both are dependencies of Candlepin.

      Why older java 1.8 is still being needed on RHEL 8? Multiple java versions are not good from the security point of view.

      [root@satellite ~]# rpm -q --requires tomcatjss
      apache-commons-lang3
      java-1.8.0-openjdk-headless
      jpackage-utils >= 0:1.7.5-15
      jss >= 4.9.0
      jss < 5.0.0
      pki-servlet-engine >= 1:9.0.7
      rpmlib(CompressedFileNames) <= 3.0.4-1
      rpmlib(FileDigests) <= 4.6.0-1
      rpmlib(PayloadFilesHavePrefix) <= 4.0-1
      rpmlib(PayloadIsXz) <= 5.2-1
      slf4j
      slf4j-jdk14

      [root@satellite ~]# cat /etc/redhat-release
      Red Hat Enterprise Linux release 8.6 (Ootpa)

      [root@satellite ~]# rpm -q --requires candlepin
      /usr/bin/bash
      /usr/libexec/platform-python
      config(candlepin) = 4.1.14-1.el8sat
      java-11 >= 1:11.0.0
      javapackages-tools
      rpmlib(CompressedFileNames) <= 3.0.4-1
      rpmlib(FileDigests) <= 4.6.0-1
      rpmlib(PayloadFilesHavePrefix) <= 4.0-1
      tomcatjss >= 7.2.1-7.1
      wget

      Version-Release number of selected component (if applicable):

      How reproducible:

      Steps to Reproduce:
      1.
      2.
      3.

      Actual results:

      root@satellite ~]# rpm -q --requires tomcatjss
      apache-commons-lang3
      java-1.8.0-openjdk-headless <-----------------
      jpackage-utils >= 0:1.7.5-15
      jss >= 4.9.0
      jss < 5.0.0
      pki-servlet-engine >= 1:9.0.7
      rpmlib(CompressedFileNames) <= 3.0.4-1
      rpmlib(FileDigests) <= 4.6.0-1
      rpmlib(PayloadFilesHavePrefix) <= 4.0-1
      rpmlib(PayloadIsXz) <= 5.2-1
      slf4j
      slf4j-jdk14

      Expected results:

      A similar java version or newer java should be used in the tomcatjss package.

      Additional info:

              jira-bugzilla-migration RH Bugzilla Integration
              rhn-support-sabhasin Sahil Bhasin
              RH Bugzilla Integration RH Bugzilla Integration
              RH Bugzilla Integration RH Bugzilla Integration
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: