From f4c7ffaefc770b3821cea7050946ec04c8c47bff Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 18 Jul 2024 07:09:09 +0000 Subject: [PATCH 1/9] fix: kernel/kernel-salt-generator/Dockerfile_DO_NOT_BUILD to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133 - https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133 - https://snyk.io/vuln/SNYK-DEBIAN11-NGHTTP2-5953384 - https://snyk.io/vuln/SNYK-DEBIAN11-CURL-5955037 - https://snyk.io/vuln/SNYK-DEBIAN11-GIT-3232724 --- kernel/kernel-salt-generator/Dockerfile_DO_NOT_BUILD | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kernel/kernel-salt-generator/Dockerfile_DO_NOT_BUILD b/kernel/kernel-salt-generator/Dockerfile_DO_NOT_BUILD index c44f9029666..b2232657f8d 100644 --- a/kernel/kernel-salt-generator/Dockerfile_DO_NOT_BUILD +++ b/kernel/kernel-salt-generator/Dockerfile_DO_NOT_BUILD @@ -1,4 +1,4 @@ -FROM openjdk:11 +FROM openjdk:17.0.2 # can be passed during Docker build as build time environment for github branch to pickup configuration from. ARG spring_config_label From 81af95d5823f9eeeb913666f56546e2a79674170 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 18 Jul 2024 07:09:45 +0000 Subject: [PATCH 2/9] fix: kernel/kernel-config-server/Dockerfile-no-updates to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133 - https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133 - https://snyk.io/vuln/SNYK-DEBIAN11-NGHTTP2-5953384 - https://snyk.io/vuln/SNYK-DEBIAN11-CURL-1585150 - https://snyk.io/vuln/SNYK-DEBIAN11-CURL-5955037 --- kernel/kernel-config-server/Dockerfile-no-updates | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kernel/kernel-config-server/Dockerfile-no-updates b/kernel/kernel-config-server/Dockerfile-no-updates index 2f2b8cb3adb..b4afad4b93a 100644 --- a/kernel/kernel-config-server/Dockerfile-no-updates +++ b/kernel/kernel-config-server/Dockerfile-no-updates @@ -1,4 +1,4 @@ -FROM openjdk:11 +FROM openjdk:17.0.2 # can be passed during Docker build as build time environment for keystore location for encryption ARG encrypt_keyStore_location From a93a28afa0279345e8db8fa98b301961765eddbc Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 18 Jul 2024 07:10:30 +0000 Subject: [PATCH 3/9] fix: kernel/kernel-bom/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-32236 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-1015415 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-5710356 --- kernel/kernel-bom/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kernel/kernel-bom/pom.xml b/kernel/kernel-bom/pom.xml index 62484149570..ca21ade8bde 100644 --- a/kernel/kernel-bom/pom.xml +++ b/kernel/kernel-bom/pom.xml @@ -53,7 +53,7 @@ 2.1.1 1.7.0 - 19.0 + 32.0.0-android 2.0.7 From 9ae783efe191a236ba073c981391b4673e472f95 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 18 Jul 2024 07:11:55 +0000 Subject: [PATCH 4/9] fix: kernel/kernel-authcodeflowproxy-api/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETOMCATEMBED-6435950 - https://snyk.io/vuln/SNYK-JAVA-ORGHIBERNATEVALIDATOR-541187 - https://snyk.io/vuln/SNYK-JAVA-ORGHIBERNATEVALIDATOR-6247635 - https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-467268 - https://snyk.io/vuln/SNYK-JAVA-ORGHIBERNATEVALIDATOR-568163 - https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-5710356 --- kernel/kernel-authcodeflowproxy-api/pom.xml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/kernel/kernel-authcodeflowproxy-api/pom.xml b/kernel/kernel-authcodeflowproxy-api/pom.xml index 69a247be7a8..5ed30b0a1ca 100644 --- a/kernel/kernel-authcodeflowproxy-api/pom.xml +++ b/kernel/kernel-authcodeflowproxy-api/pom.xml @@ -26,7 +26,7 @@ 2.3 - 2.0.2.RELEASE + 3.1.9 2.0.7.RELEASE 5.0.5.RELEASE 2.0.4.RELEASE @@ -131,7 +131,7 @@ 2.3 - 2.0.2.RELEASE + 3.1.9 2.0.7.RELEASE 5.0.5.RELEASE 2.0.4.RELEASE @@ -238,7 +238,7 @@ com.auth0 jwks-rsa - 0.18.0 + 0.22.1 org.powermock From e8b85458f7bc53a947bf3ad42d7a7747e296efc6 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 18 Jul 2024 07:12:53 +0000 Subject: [PATCH 5/9] fix: kernel/kernel-pdfgenerator-itext/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-COMITEXTPDF-2320389 - https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-1052448 - https://snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-2841508 - https://snyk.io/vuln/SNYK-JAVA-COMITEXTPDF-541282 - https://snyk.io/vuln/SNYK-JAVA-COMITEXTPDF-541284 - https://snyk.io/vuln/SNYK-JAVA-COMITEXTPDF-2391484 - https://snyk.io/vuln/SNYK-JAVA-COMITEXTPDF-2391485 - https://snyk.io/vuln/SNYK-JAVA-COMITEXTPDF-2391486 --- kernel/kernel-pdfgenerator-itext/pom.xml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/kernel/kernel-pdfgenerator-itext/pom.xml b/kernel/kernel-pdfgenerator-itext/pom.xml index a7672a4404d..78d8590a67f 100644 --- a/kernel/kernel-pdfgenerator-itext/pom.xml +++ b/kernel/kernel-pdfgenerator-itext/pom.xml @@ -16,10 +16,10 @@ 1.2.1-SNAPSHOT 0.8.11 - 7.1.0 + 7.2.4 2.0.0 5.5.13.3 - 1.66 + 1.69 @@ -78,12 +78,12 @@ com.itextpdf kernel - 7.1.0 + 7.2.4 com.itextpdf io - 7.1.0 + 7.2.2 From 6596589a945a401c2e95ed2732b26472091c968e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 18 Jul 2024 07:13:33 +0000 Subject: [PATCH 6/9] fix: kernel/kernel-bom/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-ORGJSON-5488379 - https://snyk.io/vuln/SNYK-JAVA-ORGJSON-5962464 --- kernel/kernel-bom/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kernel/kernel-bom/pom.xml b/kernel/kernel-bom/pom.xml index ca21ade8bde..1317d4334be 100644 --- a/kernel/kernel-bom/pom.xml +++ b/kernel/kernel-bom/pom.xml @@ -46,7 +46,7 @@ 2.0.9 - 20180813 + 20231013 1.1.1 0.6.0 3.2.2 From 328b4f42758053f7abc68ffa1fa2310a983f4874 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 18 Jul 2024 07:15:45 +0000 Subject: [PATCH 7/9] fix: kernel/kernel-bom/pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETOMCATEMBED-7430175 - https://snyk.io/vuln/SNYK-JAVA-COMMONSIO-1277109 - https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-6457293 - https://snyk.io/vuln/SNYK-JAVA-IONETTY-6483812 - https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-6444790 - https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-6597980 - https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-1048058 --- kernel/kernel-bom/pom.xml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/kernel/kernel-bom/pom.xml b/kernel/kernel-bom/pom.xml index 1317d4334be..5ad54bf0359 100644 --- a/kernel/kernel-bom/pom.xml +++ b/kernel/kernel-bom/pom.xml @@ -23,7 +23,7 @@ 2.0.1.Final 1.2 - 2.6 + 2.7 3.6.1 1.78.1 @@ -34,9 +34,9 @@ 1.9.21.2 - 4.5.6 + 4.5.13 - 3.9.13 + 4.4.9 3.9.4 3.8.1 From 377caea4b6336467055e3fdd584dbc7e6021b9c2 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 18 Jul 2024 07:16:49 +0000 Subject: [PATCH 8/9] fix: kernel/kernel-salt-generator/Dockerfile_DO_NOT_BUILD to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ORACLE8-GLIBC-5935529 - https://snyk.io/vuln/SNYK-ORACLE8-GLIBCCOMMON-5935226 - https://snyk.io/vuln/SNYK-ORACLE8-GLIBCMINIMALLANGPACK-5935235 - https://snyk.io/vuln/SNYK-ORACLE8-LIBNGHTTP2-6016069 - https://snyk.io/vuln/SNYK-ORACLE8-SYSTEMDLIBS-5798196 --- kernel/kernel-salt-generator/Dockerfile_DO_NOT_BUILD | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kernel/kernel-salt-generator/Dockerfile_DO_NOT_BUILD b/kernel/kernel-salt-generator/Dockerfile_DO_NOT_BUILD index b2232657f8d..dd1f351b42d 100644 --- a/kernel/kernel-salt-generator/Dockerfile_DO_NOT_BUILD +++ b/kernel/kernel-salt-generator/Dockerfile_DO_NOT_BUILD @@ -1,4 +1,4 @@ -FROM openjdk:17.0.2 +FROM openjdk:23-ea-30-jdk-oraclelinux8 # can be passed during Docker build as build time environment for github branch to pickup configuration from. ARG spring_config_label From 67a1b5a64cfffe4de3a901c6c3c8d09ea7158537 Mon Sep 17 00:00:00 2001 From: "rajapandi.m" Date: Tue, 23 Jul 2024 18:39:28 +0530 Subject: [PATCH 9/9] test --- .../main/java/io/mosip/kernel/core/util/FileUtils.java | 10 +++------- 1 file changed, 3 insertions(+), 7 deletions(-) diff --git a/kernel/kernel-core/src/main/java/io/mosip/kernel/core/util/FileUtils.java b/kernel/kernel-core/src/main/java/io/mosip/kernel/core/util/FileUtils.java index 75ec5fda026..ff2eacf03c0 100644 --- a/kernel/kernel-core/src/main/java/io/mosip/kernel/core/util/FileUtils.java +++ b/kernel/kernel-core/src/main/java/io/mosip/kernel/core/util/FileUtils.java @@ -452,13 +452,9 @@ public static boolean isFileOlder(File file, Date date) { * @throws IOException if an IO error occurs while checking the file. */ public static boolean isSymlink(File file) throws IOException { - try { - return org.apache.commons.io.FileUtils.isSymlink(file); - } catch (java.io.IOException e) { - throw new IOException(FileUtilConstants.IO_ERROR_CODE.getErrorCode(), - FileUtilConstants.IO_ERROR_CODE.getMessage(), e.getCause()); - } - } + return org.apache.commons.io.FileUtils.isSymlink(file); +} + /** * Allows iteration over the files in given directory (and optionally its sub