IBM / keyprotect-java-client

Java/JRE SDK for interacting with the IBM Cloud KeyProtect service.
https://ibm.github.io/keyprotect-java-client/
Apache License 2.0
1 stars 8 forks source link

Vulnearble verison of com.google.code.gson library upgrade #31

Closed Rishi-web closed 2 years ago

Rishi-web commented 2 years ago

w.r.t issue - https://github.ibm.com/kms/kmk/issues/1380 Upgrading "gson" along with supporting package "sdk-core" to fix CVE issue.

Rishi-web commented 2 years ago

Integration test case results

Screenshot 2022-09-14 at 11 18 35 AM
Rishi-web commented 2 years ago

Unit test case

Screenshot 2022-09-14 at 11 19 38 AM
Rishi-web commented 2 years ago

Maven clean build

Screenshot 2022-09-14 at 11 20 01 AM
Rishi-web commented 2 years ago

Maven validating the packages

Screenshot 2022-09-14 at 11 20 17 AM
Rishi-web commented 2 years ago

Maven compiling the packages

Screenshot 2022-09-14 at 11 20 39 AM
Rishi-web commented 2 years ago

Maven test

Screenshot 2022-09-14 at 11 21 04 AM
Rishi-web commented 2 years ago

Depending packages

Screenshot 2022-09-14 at 11 21 18 AM Screenshot 2022-09-14 at 11 21 50 AM Screenshot 2022-09-14 at 11 22 01 AM
Rishi-web commented 2 years ago

JDK-9 versions results

Clean

Screenshot 2022-09-14 at 4 20 19 PM

Validate

Screenshot 2022-09-14 at 4 20 44 PM

Compile

Screenshot 2022-09-14 at 4 21 15 PM

Test

Screenshot 2022-09-14 at 4 21 52 PM
Rishi-web commented 2 years ago

Integration test cases

Screenshot 2022-09-14 at 4 24 03 PM

Unit test cases

Screenshot 2022-09-14 at 4 28 04 PM
Rishi-web commented 2 years ago

JDK-11.0.15 results

Clean

Screenshot 2022-09-14 at 4 40 49 PM

Validate

Screenshot 2022-09-14 at 4 41 12 PM

Compile

Screenshot 2022-09-14 at 4 41 40 PM

Test

Screenshot 2022-09-14 at 4 42 50 PM
Rishi-web commented 2 years ago

Integration test

Screenshot 2022-09-14 at 4 45 52 PM

Unit test

Screenshot 2022-09-14 at 4 43 47 PM