[pulsar] branch branch-2.10 updated: [owasp] add suppressions for Kotlin stdlib CVE-2022-24329 (#14629)

[ni...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

nicoloboschi pushed a commit to branch branch-2.10
in repository https://gitbox.apache.org/repos/asf/pulsar.git


The following commit(s) were added to refs/heads/branch-2.10 by this push:
     new 4be6eee6e29 [owasp] add suppressions for Kotlin stdlib CVE-2022-24329 (#14629)
4be6eee6e29 is described below

commit 4be6eee6e294a1858d35540515b5161d043a8d20
Author: Nicolò Boschi <bo...@gmail.com>
AuthorDate: Thu Mar 10 04:49:57 2022 +0100

    [owasp] add suppressions for Kotlin stdlib CVE-2022-24329 (#14629)
    
    (cherry picked from commit 4910519eb5c20249d982cab40813af3e870e4f90)
---
 src/owasp-dependency-check-suppressions.xml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/owasp-dependency-check-suppressions.xml b/src/owasp-dependency-check-suppressions.xml
index 08edea57095..34266915431 100644
--- a/src/owasp-dependency-check-suppressions.xml
+++ b/src/owasp-dependency-check-suppressions.xml
@@ -42,6 +42,14 @@
         <vulnerabilityName regex="true">.*</vulnerabilityName>
     </suppress>
 
+    <suppress>
+        <notes><![CDATA[
+   file name: kotlin-stdlib-1.4.32.jar
+   ]]></notes>
+        <sha1>461367948840adbb0839c51d91ed74ef4a9ccb52</sha1>
+        <cve>CVE-2022-24329</cve>
+    </suppress>
+
     <!-- see https://github.com/alibaba/canal/issues/4010 -->
     <suppress>
         <notes><![CDATA[