docker: fixes CVE in eureka image (#3752)

Signed-off-by: Adrian Cole <adrian@tetrate.io>

docker/test-images/zipkin-eureka/pom.xml

@@ -33,6 +33,7 @@
         <type>pom</type>
         <scope>import</scope>
       </dependency>
+      <!-- CVE fix versions -->
       <dependency>
         <groupId>com.google.guava</groupId>
         <artifactId>guava</artifactId>
@@ -43,6 +44,11 @@
         <artifactId>xstream</artifactId>
         <version>1.4.20</version>
       </dependency>
+      <dependency>
+        <groupId>org.apache.httpcomponents</groupId>
+        <artifactId>httpclient</artifactId>
+        <version>4.5.14</version>
+      </dependency>
     </dependencies>
   </dependencyManagement>
 

pom.xml

@@ -80,7 +80,7 @@
     <mockito.version>5.11.0</mockito.version>
     <assertj.version>3.25.3</assertj.version>
     <awaitility.version>4.2.0</awaitility.version>
-    <testcontainers.version>1.19.6</testcontainers.version>
+    <testcontainers.version>1.19.7</testcontainers.version>
     <okhttp.version>4.12.0</okhttp.version>
     <kryo.version>5.6.0</kryo.version>
     <!-- Only used for proto interop testing; wire-maven-plugin is usually behind latest. -->