From 22bbbbe5874927b9a32257218b1aac9714a02a38 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marek=20Novotn=C3=BD?= <hotmana76@gmail.com>
Date: Thu, 12 Sep 2024 09:17:23 +0200
Subject: [PATCH] Backports of CVEs (#2490)

* Bumped undertow to  (#2469)

* Bump org.apache.commons:commons-compress from 1.21 to 1.26.0

Bumps org.apache.commons:commons-compress from 1.21 to 1.26.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* upgraded commons-compress requires io at 2.15.1?

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Yeser Amer <yeser.amer@ibm.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pom.xml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pom.xml b/pom.xml
index d0630833335..2b1beff3912 100644
--- a/pom.xml
+++ b/pom.xml
@@ -68,7 +68,7 @@
     <version.commons-logging>1.1.1</version.commons-logging>
     <version.commons-net>3.9.0</version.commons-net>
     <version.commons-pool>1.6</version.commons-pool>
-    <version.commons-io>2.7</version.commons-io>
+    <version.commons-io>2.15.1</version.commons-io>
     <version.common-text>1.10.0</version.common-text>
     <version.com.ahome-it.lienzo.tooling.nativetools>1.0.195-RELEASE
     </version.com.ahome-it.lienzo.tooling.nativetools>
@@ -105,7 +105,7 @@
     <version.io.smallrye.openapi.core>2.1.4</version.io.smallrye.openapi.core>
     <version.io.strimzi.strimzi-test-container>0.106.0</version.io.strimzi.strimzi-test-container>
     <version.io.takari.maven.plugins.testing>2.9.2</version.io.takari.maven.plugins.testing>
-    <version.io.undertow>2.2.28.Final</version.io.undertow>
+    <version.io.undertow>2.2.33.Final</version.io.undertow>
     <version.jaxen>1.1.6</version.jaxen>
     <version.jivesoftware.smack>3.1.0</version.jivesoftware.smack>
     <version.joda-time>2.9.7</version.joda-time>
@@ -128,7 +128,7 @@
     <version.org.apache.aries.blueprint.parser>1.4.0</version.org.apache.aries.blueprint.parser>
     <version.org.apache.chemistry.opencmis>0.14.0</version.org.apache.chemistry.opencmis>
     <version.org.apache.commons.dbcp2>2.1.1</version.org.apache.commons.dbcp2>
-    <version.org.apache.commons.compress>1.21</version.org.apache.commons.compress>
+    <version.org.apache.commons.compress>1.26.0</version.org.apache.commons.compress>
     <version.org.apache.commons.csv>1.6</version.org.apache.commons.csv>
     <version.org.apache.commons.exec>1.3</version.org.apache.commons.exec>
     <version.org.apache.commons.lang3>3.11</version.org.apache.commons.lang3>