Backports of CVEs (#2490)

* Bumped undertow to  (#2469)

* Bump org.apache.commons:commons-compress from 1.21 to 1.26.0

Bumps org.apache.commons:commons-compress from 1.21 to 1.26.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* upgraded commons-compress requires io at 2.15.1?

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Yeser Amer <yeser.amer@ibm.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

pom.xml

@@ -68,7 +68,7 @@
     <version.commons-logging>1.1.1</version.commons-logging>
     <version.commons-net>3.9.0</version.commons-net>
     <version.commons-pool>1.6</version.commons-pool>
-    <version.commons-io>2.7</version.commons-io>
+    <version.commons-io>2.15.1</version.commons-io>
     <version.common-text>1.10.0</version.common-text>
     <version.com.ahome-it.lienzo.tooling.nativetools>1.0.195-RELEASE
     </version.com.ahome-it.lienzo.tooling.nativetools>
@@ -105,7 +105,7 @@
     <version.io.smallrye.openapi.core>2.1.4</version.io.smallrye.openapi.core>
     <version.io.strimzi.strimzi-test-container>0.106.0</version.io.strimzi.strimzi-test-container>
     <version.io.takari.maven.plugins.testing>2.9.2</version.io.takari.maven.plugins.testing>
-    <version.io.undertow>2.2.28.Final</version.io.undertow>
+    <version.io.undertow>2.2.33.Final</version.io.undertow>
     <version.jaxen>1.1.6</version.jaxen>
     <version.jivesoftware.smack>3.1.0</version.jivesoftware.smack>
     <version.joda-time>2.9.7</version.joda-time>
@@ -128,7 +128,7 @@
     <version.org.apache.aries.blueprint.parser>1.4.0</version.org.apache.aries.blueprint.parser>
     <version.org.apache.chemistry.opencmis>0.14.0</version.org.apache.chemistry.opencmis>
     <version.org.apache.commons.dbcp2>2.1.1</version.org.apache.commons.dbcp2>
-    <version.org.apache.commons.compress>1.21</version.org.apache.commons.compress>
+    <version.org.apache.commons.compress>1.26.0</version.org.apache.commons.compress>
     <version.org.apache.commons.csv>1.6</version.org.apache.commons.csv>
     <version.org.apache.commons.exec>1.3</version.org.apache.commons.exec>
     <version.org.apache.commons.lang3>3.11</version.org.apache.commons.lang3>