[cassandra] branch cassandra-3.0 updated: Suppress CVE-2022-24823

[br...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

brandonwilliams pushed a commit to branch cassandra-3.0
in repository https://gitbox.apache.org/repos/asf/cassandra.git


The following commit(s) were added to refs/heads/cassandra-3.0 by this push:
     new a482e37435 Suppress CVE-2022-24823
a482e37435 is described below

commit a482e374356fa401829e5e562460087b1d79927a
Author: Brandon Williams <br...@apache.org>
AuthorDate: Wed May 18 10:06:34 2022 -0500

    Suppress CVE-2022-24823
    
    Patch by brandonwilliams; reviewed by edimitrova for CASSANDRA-17633
---
 .build/dependency-check-suppressions.xml | 1 +
 CHANGES.txt                              | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.build/dependency-check-suppressions.xml b/.build/dependency-check-suppressions.xml
index 4c1c0546f1..a9d37c9f10 100644
--- a/.build/dependency-check-suppressions.xml
+++ b/.build/dependency-check-suppressions.xml
@@ -38,6 +38,7 @@
         <cve>CVE-2021-37136</cve>
         <cve>CVE-2021-37137</cve>
         <cve>CVE-2021-43797</cve>
+        <cve>CVE-2022-24823</cve>
     </suppress>
 
     <!-- https://issues.apache.org/jira/browse/CASSANDRA-14183 -->
diff --git a/CHANGES.txt b/CHANGES.txt
index ba73edad1c..767741bdd7 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -1,4 +1,5 @@
 3.0.28
+ * Suppress CVE-2022-24823 (CASSANDRA-17633)
  * fsync TOC and digest files (CASSANDRA-10709)
 
 


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org