Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-68738

javapackages-tools should not have any hard dependency on a specific OpenJDK [rhel-10.0]

    • Icon: Story Story
    • Resolution: Unresolved
    • Icon: Major Major
    • rhel-10.0
    • rhel-10.0
    • javapackages-tools
    • None
    • rhel-sst-cs-base-utils
    • ssg_core_services
    • 22
    • 8
    • Dev ack
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • Hide

      None of binary packages that belong to javapackages-tools component may have direct or transitive dependencies (Requires or Recommends) on any OpenJDK packages, with exception that specific subpackages with suffixes -openjdk${n} can depend on OpenJDK ${n}, but no other OpenJDK versions.

      Show
      None of binary packages that belong to javapackages-tools component may have direct or transitive dependencies (Requires or Recommends) on any OpenJDK packages, with exception that specific subpackages with suffixes -openjdk${n } can depend on OpenJDK ${n}, but no other OpenJDK versions.
    • None
    • None
    • None

      It appears that javapackages-tools has some hardcoded dependencies specific version of the JDK at any given time.

      There are two problems with that however, one is that the version picked is usually not coordinated with the OpenJDK team, causing a lot of additional work when there is a version mismatch (see for example handling of RHEL 10 default JDK to be OpenJDK 21 instead of 17), and the other being that if the system JDK changes for any reason but javapackages-tools is not updated, any java application or library that depends on javapackages-tools will silently use the older JDK failing in unexpected ways and opening the doors to CVEs and other problems for our customers and users.

      Javapackage-tools should not depend on a specific version of the JDK and instead respect the system configurations (i.e. OpenJDK packages using default java and java-devel provides), and should definitely not pick at any time a random JDK without consulting with the OpenJDK team.

              mizdebsk@redhat.com Mikolaj Izdebski
              mtorre@redhat.com Mario Torre
              Mikolaj Izdebski Mikolaj Izdebski
              RHEL SST CS base utils QE Bot RHEL SST CS base utils QE Bot
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: