From 7150cc5b99aafa6194dbaa5b8c73dc82e33c5279 Mon Sep 17 00:00:00 2001 From: Brandon Williams Date: Wed, 5 Jul 2023 11:11:12 -0500 Subject: [PATCH] Suppress CVE-2023-34462 Patch by brandonwilliams; reviewed by bereng for CASSANDRA-18649 --- .build/dependency-check-suppressions.xml | 1 + CHANGES.txt | 1 + 2 files changed, 2 insertions(+) diff --git a/.build/dependency-check-suppressions.xml b/.build/dependency-check-suppressions.xml index d59b76b873..96500422d4 100644 --- a/.build/dependency-check-suppressions.xml +++ b/.build/dependency-check-suppressions.xml @@ -59,6 +59,7 @@ CVE-2022-24823 CVE-2022-41881 CVE-2022-41915 + CVE-2023-34462 diff --git a/CHANGES.txt b/CHANGES.txt index 069f446a80..cc2eea7a38 100644 --- a/CHANGES.txt +++ b/CHANGES.txt @@ -1,4 +1,5 @@ 3.0.30 + * Suppress CVE-2023-34462 (CASSANDRA-18649) * Add support for AWS Ec2 IMDSv2 (CASSANDRA-16555) * Suppress CVE-2023-35116 (CASSANDRA-18630) * Pass taskId from CompactionTask to system.compaction_history (CASSANDRA-12183)