Backports of CVEs (#2490)

* Bumped undertow to (#2469) * Bump org.apache.commons:commons-compress from 1.21 to 1.26.0 Bumps org.apache.commons:commons-compress from 1.21 to 1.26.0. --- updated-dependencies: - dependency-name: org.apache.commons:commons-compress dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> * upgraded commons-compress requires io at 2.15.1? --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: Yeser Amer <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
kiegroup · Sep 12, 2024 · 22bbbbe · 22bbbbe
1 parent f7d030f
commit 22bbbbe
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/pom.xml b/pom.xml
@@ -68,7 +68,7 @@
     <version.commons-logging>1.1.1</version.commons-logging>
     <version.commons-net>3.9.0</version.commons-net>
     <version.commons-pool>1.6</version.commons-pool>
-    <version.commons-io>2.7</version.commons-io>
+    <version.commons-io>2.15.1</version.commons-io>
     <version.common-text>1.10.0</version.common-text>
     <version.com.ahome-it.lienzo.tooling.nativetools>1.0.195-RELEASE
     </version.com.ahome-it.lienzo.tooling.nativetools>
@@ -105,7 +105,7 @@
     <version.io.smallrye.openapi.core>2.1.4</version.io.smallrye.openapi.core>
     <version.io.strimzi.strimzi-test-container>0.106.0</version.io.strimzi.strimzi-test-container>
     <version.io.takari.maven.plugins.testing>2.9.2</version.io.takari.maven.plugins.testing>
-    <version.io.undertow>2.2.28.Final</version.io.undertow>
+    <version.io.undertow>2.2.33.Final</version.io.undertow>
     <version.jaxen>1.1.6</version.jaxen>
     <version.jivesoftware.smack>3.1.0</version.jivesoftware.smack>
     <version.joda-time>2.9.7</version.joda-time>
@@ -128,7 +128,7 @@
     <version.org.apache.aries.blueprint.parser>1.4.0</version.org.apache.aries.blueprint.parser>
     <version.org.apache.chemistry.opencmis>0.14.0</version.org.apache.chemistry.opencmis>
     <version.org.apache.commons.dbcp2>2.1.1</version.org.apache.commons.dbcp2>
-    <version.org.apache.commons.compress>1.21</version.org.apache.commons.compress>
+    <version.org.apache.commons.compress>1.26.0</version.org.apache.commons.compress>
     <version.org.apache.commons.csv>1.6</version.org.apache.commons.csv>
     <version.org.apache.commons.exec>1.3</version.org.apache.commons.exec>
     <version.org.apache.commons.lang3>3.11</version.org.apache.commons.lang3>