Suppress CVE-2022-41915

Patch by brandonwilliams; reviewed by bereng for CASSANDRA-18147
apache · Jan 30, 2023 · fa18ea1 · fa18ea1
1 parent 4c8e909
commit fa18ea1
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/.build/dependency-check-suppressions.xml b/.build/dependency-check-suppressions.xml
@@ -50,6 +50,7 @@
         <cve>CVE-2021-43797</cve>
         <cve>CVE-2022-24823</cve>
         <cve>CVE-2022-41881</cve>
+        <cve>CVE-2022-41915</cve>
     </suppress>
 
     <!-- https://issues.apache.org/jira/browse/CASSANDRA-14183 -->

diff --git a/CHANGES.txt b/CHANGES.txt
@@ -1,5 +1,6 @@
 3.0.29
  * Introduce check for names of test classes (CASSANDRA-17964)
+ * Suppress CVE-2022-41915 (CASSANDRA-18147)
  * Suppress CVE-2021-1471, CVE-2021-3064, CVE-2021-4235 (CASSANDRA-18149)
  * Switch to snakeyaml's SafeConstructor (CASSANDRA-18150)
  * Expand build.dir property in rat targets (CASSANDRA-18183)