CCLOG-1086 Cve fixes for CVE-2021-28168-1, CVE-2021-35515, CVE-2021-36090, CVE-2…

[shaikzakiriitm]

…021-35516, CVE-2021-35517, CVE-2020-25649, CVE-2020-8908 in datagen source connector

Problem

CVEs in datagen source connector

• CVE-2021-28168-1
• CVE-2021-35515
• CVE-2021-36090
• CVE-2021-35516
• CVE-2021-35517
• CVE-2020-25649
• CVE-2020-8908

Solution

Upgraded version of common-parent dependency. Pinned the version of org.apache.commons:commons-compress for cve fix. Upgraded guava dependency version.

Does this solution apply anywhere else?

• [ ] yes
• [x] no

If yes, where?

Test Strategy

Build passes locally.

Testing done:

• [ ] Unit tests
• [ ] Integration tests
• [ ] System tests
• [ ] Manual tests

Release Plan

[shaikzakiriitm]

All jar and custom type of CVEs are fixed.