From f18b432ce6904bd2d9f9d778e2f99715bbe5d413 Mon Sep 17 00:00:00 2001
From: Brandon Williams <brandonwilliams@apache.org>
Date: Wed, 9 Feb 2022 12:18:22 -0600
Subject: [PATCH] Suppress more inapplicables: CVE-2021-43797, CVE-2021-37136,
 CVE-2021-37137

Patch by brandonwilliams, reviewed by bereng for CASSANDRA-17368
---
 .build/dependency-check-suppressions.xml | 3 +++
 CHANGES.txt                              | 1 +
 2 files changed, 4 insertions(+)

diff --git a/.build/dependency-check-suppressions.xml b/.build/dependency-check-suppressions.xml
index b9776cfbf0..798c71fe24 100644
--- a/.build/dependency-check-suppressions.xml
+++ b/.build/dependency-check-suppressions.xml
@@ -35,6 +35,9 @@
         <cve>CVE-2021-21290</cve>
         <cve>CVE-2021-21295</cve>
         <cve>CVE-2021-21409</cve>
+        <cve>CVE-2021-37136</cve>
+        <cve>CVE-2021-37137</cve>
+        <cve>CVE-2021-43797</cve>
     </suppress>
 
     <!-- https://issues.apache.org/jira/browse/CASSANDRA-14183 -->
diff --git a/CHANGES.txt b/CHANGES.txt
index 40e30f20ab..d6bbcd79b0 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -1,4 +1,5 @@
 3.0.27
+ * Suppress inapplicable CVEs (CASSANDRA-17368)
  * Fix flaky test - test_cqlsh_completion.TestCqlshCompletion (CASSANDRA-17338)
  * Fixed TestCqlshOutput failing tests (CASSANDRA-17386)
  * LeveledCompactionStrategy disk space check improvements (CASSANDRA-17272)