Suppress CVE-2023-2251

Patch by brandonwilliams; reviewed by smiklosovic for CASSANDRA-18497
apache · May 4, 2023 · 4a62757 · 4a62757
1 parent db78e74
commit 4a62757
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/.build/dependency-check-suppressions.xml b/.build/dependency-check-suppressions.xml
@@ -23,6 +23,7 @@
     <suppress>
         <!--  https://issues.apache.org/jira/browse/CASSANDRA-16150 -->
         <packageUrl regex="true">^pkg:maven/org\.yaml/snakeyaml@.*$</packageUrl>
+        <cve>CVE-2023-2251</cve>
         <cve>CVE-2022-38752</cve>
         <cve>CVE-2022-38751</cve>
         <cve>CVE-2022-38750</cve>

diff --git a/CHANGES.txt b/CHANGES.txt
@@ -1,4 +1,5 @@
 3.0.29
+ * Suppress CVE-2023-2251 (CASSANDRA-18497)
  * Do not remove SSTables when cause of FSReadError is OutOfMemoryError while using best_effort disk failure policy (CASSANDRA-18336)
  * Do not remove truncated_at entry in system.local while dropping an index (CASSANDRA-18105)
  * Save host id to system.local and flush immediately after startup (CASSANDRA-18153)