Update dependencies identified in CVE scanning

[minesh-s-patel]

List of CVEs for rosetta-dsl

mvn org.codehaus.mojo:versions-maven-plugin:display-dependency-updates

[ERROR] org.eclipse.osgi-3.17.100.v20211104-1730.jar: CVE-2021-41033
[ERROR] org.junit.platform.commons-1.8.1.v20211018-1956.jar: CVE-2020-27225
[ERROR] org.eclipse.core.commands-3.10.100.v20210722-1426.jar: CVE-2021-41033
[ERROR] org.eclipse.equinox.common-3.15.100.v20211021-1418.jar: CVE-2021-41033
[ERROR] org.eclipse.core.contenttype-3.8.100.v20210910-0640.jar: CVE-2021-41033
[ERROR] org.eclipse.equinox.preferences-3.9.100.v20211021-1418.jar: CVE-2021-41033
[ERROR] org.eclipse.equinox.registry-3.11.100.v20211021-1418.jar: CVE-2021-41033
[ERROR] org.eclipse.core.databinding-1.10.100.v20200926-1123.jar: CVE-2021-41033
[ERROR] org.eclipse.core.databinding.observable-1.11.0.v20210722-1426.jar: CVE-2021-41033
[ERROR] org.eclipse.core.databinding.beans-1.8.0.v20210619-1111.jar: CVE-2021-41033
[ERROR] org.eclipse.core.runtime-3.24.0.v20210910-0750.jar: CVE-2021-41033
[ERROR] org.eclipse.core.jobs-3.12.0.v20210723-1034.jar: CVE-2021-41033
[ERROR] org.eclipse.equinox.app-1.6.100.v20211021-1418.jar: CVE-2021-41033
[ERROR] org.eclipse.e4.core.services-2.3.100.v20210910-0640.jar: CVE-2021-41033
[ERROR] org.eclipse.e4.ui.model.workbench-2.2.0.v20210727-1533.jar: CVE-2020-36460
[ERROR] org.eclipse.e4.ui.css.swt.theme-0.13.0.v20201026-1147.jar: CVE-2021-41033
[ERROR] org.eclipse.equinox.event-1.6.100.v20211021-1418.jar: CVE-2021-41033
[ERROR] org.eclipse.equinox.launcher-1.6.400.v20210924-0641.jar: CVE-2021-41033
[ERROR] org.eclipse.equinox.simpleconfigurator-1.4.0.v20210315-2228.jar: CVE-2021-41033
[ERROR] org.eclipse.equinox.launcher.cocoa.macosx.aarch64-1.2.400.v20211117-0650.jar: CVE-2021-41033
[ERROR] org.eclipse.jface-3.24.0.v20211110-1517.jar: CVE-2021-41033
[ERROR] org.eclipse.jface.databinding-1.13.0.v20210619-1146.jar: CVE-2021-41033
[ERROR] org.eclipse.e4.ui.workbench3-0.16.0.v20210619-0956.jar: CVE-2021-41033
[ERROR] org.eclipse.equinox.console-1.4.500.v20211021-1418.jar: CVE-2021-41033
[ERROR] org.eclipse.equinox.bidi-1.4.100.v20211021-1418.jar: CVE-2021-41033
[ERROR] org.eclipse.urischeme-1.2.100.v20211001-1648.jar: CVE-2021-41033, CVE-2020-27225
[ERROR] org.eclipse.update.configurator-3.4.800.v20210415-1314.jar: CVE-2021-41033
[ERROR] org.apache.log4j-1.2.15.v201012070815.jar: CVE-2020-9493, CVE-2022-23307, CVE-2022-23305, CVE-2019-17571, CVE-2022-23302
[ERROR] org.eclipse.xtext.logging-1.2.15.v20210301-0928.jar: CVE-2019-10249
[ERROR] org.eclipse.equinox.launcher.cocoa.macosx.x86_64-1.2.400.v20211117-0650.jar: CVE-2021-41033
[ERROR] org.eclipse.equinox.launcher.win32.win32.x86_64-1.2.400.v20211117-0650.jar: CVE-2021-41033
[ERROR] org.eclipse.equinox.launcher.gtk.linux.x86_64-1.2.400.v20211117-0650.jar: CVE-2021-41033

[SimonCockx]

Related to #31

[maoo]

Hi @SimonCockx @minesh-s-patel , any update on this issue ?

[maoo]

Please find the updated list of CVEs on https://github.com/maoo/rosetta-dsl/actions/runs/3272125056/jobs/5382755130#step:5:5664

[robmoffat]

@SimonCockx @minesh-s-patel can we get some progress on this please?

[SimonCockx]

@robmoffat @maoo Sorry for the wait. Starting from tomorrow I'm gonna take this on as my primary task.