You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@cassandra.apache.org by br...@apache.org on 2025/03/11 20:18:47 UTC

(cassandra) 01/03: Suppress CVE-2024-12798

This is an automated email from the ASF dual-hosted git repository.

brandonwilliams pushed a commit to branch cassandra-4.0
in repository https://gitbox.apache.org/repos/asf/cassandra.git

commit 393901a85842b952a25e2c2d6dfc4de6d0d59c2c
Author: Brandon Williams <br...@apache.org>
AuthorDate: Thu Mar 6 12:36:32 2025 -0600

    Suppress CVE-2024-12798
    
    Patch by brandonwilliams; reviewed by smiklosovic for CASSANDRA-20408
---
 .build/dependency-check-suppressions.xml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.build/dependency-check-suppressions.xml b/.build/dependency-check-suppressions.xml
index f8bf01b41f..a25230a60b 100644
--- a/.build/dependency-check-suppressions.xml
+++ b/.build/dependency-check-suppressions.xml
@@ -63,9 +63,11 @@
     <suppress>
         <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-core@.*$</packageUrl>
         <cve>CVE-2023-6378</cve>
+        <cve>CVE-2024-12798</cve>
     </suppress>
     <suppress>
         <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-classic@.*$</packageUrl>
         <cve>CVE-2023-6378</cve>
+        <cve>CVE-2024-12798</cve>
     </suppress>
 </suppressions>


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org