[CVE] Upgrade dependencies for Azure related plugins to mitigate CVEs

[abbashus]

Description

This PR aims to upgrade the dependencies to resolve the respective CVE's:

Dependency	Update To	Module	CVE's
commons-io-2.4.jar	2.7	discovery-azure-classic	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29425
jackson-mapper-asl-1.9.2.jar	com.fasterxml.jackson.core:jackson-databind:2.9.9	discovery-azure-classic	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10172 , https://access.redhat.com/errata/RHSA-2019:2938
guava-20.0.jar	30.1.1-jre	repository-azure	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8908

Issues Resolved

Relates #646

Check List

• New functionality includes testing.
  • All tests pass
• New functionality has been documented.
  • New functionality has javadoc added
• Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: Abbas Hussain abbas_10690@yahoo.com

[opensearch-ci-bot]

✅   DCO Check Passed 2ec616e

[opensearch-ci-bot]

✅   Gradle Wrapper Validation success 2ec616e

[opensearch-ci-bot]

✅   Gradle Precommit success 2ec616e

[adnapibar]

As per the google/guava#4011 v30.0 does not fix the CVE. I think we need to update to 30.1.1

[abbashus]

guava:30.1.1-jre also does not fix it, though we should still upgrade it to this version. The correct fix is to use the more secure java.nio.file.Files.createTempDirectory() API.

For other Java developers, we recommend migrating to the Java 7 API java.nio.file.Files.createTempDirectory() which explicitly configures permissions of 700, or configuring the Java runtime's java.io.tmpdir system property to point to a location whose permissions are appropriately configured.

[opensearch-ci-bot]

❌   DCO Check Failed 3cebd9688626ce12b8176fc79c69408c24b4f27b
Run ./dev-tools/signoff-check.sh remotes/origin/main 3cebd9688626ce12b8176fc79c69408c24b4f27b to check locally
Use git commit with -s to add 'Signed-of-by: {EMAIL}' on impacted commits

[opensearch-ci-bot]

✅   Gradle Wrapper Validation success 3cebd9688626ce12b8176fc79c69408c24b4f27b

[opensearch-ci-bot]

✅   DCO Check Passed be4cf8f

[opensearch-ci-bot]

✅   Gradle Wrapper Validation success be4cf8f

[opensearch-ci-bot]

✅   Gradle Precommit success 3cebd9688626ce12b8176fc79c69408c24b4f27b

[opensearch-ci-bot]

✅   Gradle Precommit success be4cf8f

[opensearch-ci-bot]

✅   Gradle Wrapper Validation success 249131c13912282db0a9f0fda6683d5eada65545

[opensearch-ci-bot]

❌   DCO Check Failed 249131c13912282db0a9f0fda6683d5eada65545
Run ./dev-tools/signoff-check.sh remotes/origin/main 249131c13912282db0a9f0fda6683d5eada65545 to check locally
Use git commit with -s to add 'Signed-of-by: {EMAIL}' on impacted commits

[opensearch-ci-bot]

✅   Gradle Precommit success 249131c13912282db0a9f0fda6683d5eada65545

[opensearch-ci-bot]

❌   DCO Check Failed f3eea4f
Run ./dev-tools/signoff-check.sh remotes/origin/main f3eea4ffe391cc2068412f420fe7e07abcad6439 to check locally
Use git commit with -s to add 'Signed-of-by: {EMAIL}' on impacted commits

[opensearch-ci-bot]

✅   Gradle Wrapper Validation success f3eea4f

[opensearch-ci-bot]

✅   Gradle Precommit success f3eea4f

[abbashus]

Closing in lieu of #688