You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@druid.apache.org by ji...@apache.org on 2021/12/11 02:01:26 UTC
[druid] 06/07: Suppress log4j 1.2.17 check for Ranger extension
This is an automated email from the ASF dual-hosted git repository.
jihoonson pushed a commit to branch 0.22.1
in repository https://gitbox.apache.org/repos/asf/druid.git
commit e72313a7c6e3e56154f4dd4afd91543fe0f164a3
Author: Gian Merlino <gi...@imply.io>
AuthorDate: Fri Dec 10 17:25:31 2021 -0800
Suppress log4j 1.2.17 check for Ranger extension
---
owasp-dependency-check-suppressions.xml | 1 +
1 file changed, 1 insertion(+)
diff --git a/owasp-dependency-check-suppressions.xml b/owasp-dependency-check-suppressions.xml
index 7ecfac0..6772c92 100644
--- a/owasp-dependency-check-suppressions.xml
+++ b/owasp-dependency-check-suppressions.xml
@@ -286,6 +286,7 @@
]]></notes>
<packageUrl regex="true">^pkg:maven/log4j/log4j@1.2.17$</packageUrl>
<cve>CVE-2019-17571</cve>
+ <cve>CVE-2021-44228</cve>
</suppress>
<suppress>
<!--
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org