This is an automated email from the ASF dual-hosted git repository.

brandonwilliams pushed a commit to branch cassandra-3.11
in repository https://gitbox.apache.org/repos/asf/cassandra.git

commit 4b84a8d7ac5875bed35c81e1f0107c495452ba0b
Merge: a5b05cea5e 5374f56a0a
Author: Brandon Williams <brandonwilli...@apache.org>
AuthorDate: Fri Feb 24 12:29:37 2023 -0600

    Merge branch 'cassandra-3.0' into cassandra-3.11

 .build/dependency-check-suppressions.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --cc .build/dependency-check-suppressions.xml
index 8bd46b0abc,4438f2259e..b0603e3f90
--- a/.build/dependency-check-suppressions.xml
+++ b/.build/dependency-check-suppressions.xml
@@@ -23,15 -23,14 +23,15 @@@
      <suppress>
          <!--  https://issues.apache.org/jira/browse/CASSANDRA-16150 -->
          <packageUrl 
regex="true">^pkg:maven/org\.yaml/snakeyaml@.*$</packageUrl>
 -        <cve>CVE-2022-38752</cve>
 -        <cve>CVE-2022-38751</cve>
 -        <cve>CVE-2022-38750</cve>
 -        <cve>CVE-2022-41854</cve>
 +        <cve>CVE-2017-18640</cve>
          <cve>CVE-2022-25857</cve>
          <cve>CVE-2022-38749</cve>
 +        <cve>CVE-2022-38750</cve>
 +        <cve>CVE-2022-38751</cve>
 +        <cve>CVE-2022-38752</cve>
 +        <cve>CVE-2022-41854</cve>
-         <cve>CVE-2021-1471</cve>
-         <cve>CVE-2021-3064</cve>
+         <cve>CVE-2022-1471</cve>
+         <cve>CVE-2022-3064</cve>
          <cve>CVE-2021-4235</cve>
          <cve>CVE-2017-18640</cve>
      </suppress>


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org

Reply via email to