From 592cee30640f7d5ca0fc80cefb1c9dad24a58a81 Mon Sep 17 00:00:00 2001
From: Brandon Williams <brandonwilliams@apache.org>
Date: Mon, 21 Mar 2022 12:50:25 -0500
Subject: [PATCH] Suppress CVE-2021-44521

Patch by brandonwilliams; reviewed by bereng for CASSANDRA-17459
---
 .build/dependency-check-suppressions.xml | 1 +
 CHANGES.txt                              | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.build/dependency-check-suppressions.xml b/.build/dependency-check-suppressions.xml
index 0003951687..7633085a82 100644
--- a/.build/dependency-check-suppressions.xml
+++ b/.build/dependency-check-suppressions.xml
@@ -26,6 +26,7 @@
         <cve>CVE-2018-8016</cve>
         <cve>CVE-2020-13946</cve>
         <cve>CVE-2020-17516</cve>
+        <cve>CVE-2021-44521</cve>
     </suppress>
     <suppress>
         <!-- dependency checker identified this as a completely different package (wire) -->
diff --git a/CHANGES.txt b/CHANGES.txt
index 1e710a3b83..5b13f9b90d 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -1,4 +1,5 @@
 4.0.4
+ * Suppress CVE-2021-44521 from driver (CASSANDRA-17459)
  * Upgrade jackson to 2.13.2 (CASSANDRA-17460)
  * Make sstableloader honour native port option (CASSANDRA-17210)
  * Reject snapshot names with special character (CASSANDRA-15297)