You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by br...@apache.org on 2022/02/28 13:47:50 UTC
[cassandra] branch cassandra-3.0 updated: Suppress more inapplicables: CVE-2021-43797, CVE-2021-37136, CVE-2021-37137
This is an automated email from the ASF dual-hosted git repository.
brandonwilliams pushed a commit to branch cassandra-3.0
in repository https://gitbox.apache.org/repos/asf/cassandra.git
The following commit(s) were added to refs/heads/cassandra-3.0 by this push:
new f18b432 Suppress more inapplicables: CVE-2021-43797, CVE-2021-37136, CVE-2021-37137
f18b432 is described below
commit f18b432ce6904bd2d9f9d778e2f99715bbe5d413
Author: Brandon Williams <br...@apache.org>
AuthorDate: Wed Feb 9 12:18:22 2022 -0600
Suppress more inapplicables: CVE-2021-43797, CVE-2021-37136, CVE-2021-37137
Patch by brandonwilliams, reviewed by bereng for CASSANDRA-17368
---
.build/dependency-check-suppressions.xml | 3 +++
CHANGES.txt | 1 +
2 files changed, 4 insertions(+)
diff --git a/.build/dependency-check-suppressions.xml b/.build/dependency-check-suppressions.xml
index b9776cf..798c71f 100644
--- a/.build/dependency-check-suppressions.xml
+++ b/.build/dependency-check-suppressions.xml
@@ -35,6 +35,9 @@
<cve>CVE-2021-21290</cve>
<cve>CVE-2021-21295</cve>
<cve>CVE-2021-21409</cve>
+ <cve>CVE-2021-37136</cve>
+ <cve>CVE-2021-37137</cve>
+ <cve>CVE-2021-43797</cve>
</suppress>
<!-- https://issues.apache.org/jira/browse/CASSANDRA-14183 -->
diff --git a/CHANGES.txt b/CHANGES.txt
index 40e30f2..d6bbcd7 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -1,4 +1,5 @@
3.0.27
+ * Suppress inapplicable CVEs (CASSANDRA-17368)
* Fix flaky test - test_cqlsh_completion.TestCqlshCompletion (CASSANDRA-17338)
* Fixed TestCqlshOutput failing tests (CASSANDRA-17386)
* LeveledCompactionStrategy disk space check improvements (CASSANDRA-17272)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org