natas_hw
/
cassandra
mirror of https://github.com/apache/cassandra
0
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'cassandra-5.0' into trunk

This commit is contained in:
Stefan Miklosovic 2026-02-17 11:44:36 +11:00
parent 3fc830a19c 60c7f05138
commit 56c3d72fe8
No known key found for this signature in database
GPG Key ID: 32F35CB2F546D93E
2 changed files with 5 additions and 30 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
.build/owasp/dependency-check-suppressions.xml
View File

@ -43,26 +43,9 @@
<cve>CVE-2025-58057</cve> <cve>CVE-2025-58057</cve>
</suppress> </suppress>
<!-- https://issues.apache.org/jira/browse/CASSANDRA-19142 --> <!-- https://issues.apache.org/jira/browse/CASSANDRA-21159 -->
<!-- https://issues.apache.org/jira/browse/CASSANDRA-20412 -->
<suppress> <suppress>
<packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-core@.*$</packageUrl> <packageUrl regex="true">^pkg:maven/io\.netty/netty\-.*@.*$</packageUrl>
<cve>CVE-2023-6378</cve> <cve>CVE-2025-67735</cve>
<cve>CVE-2023-6481</cve>
<cve>CVE-2024-12798</cve>
<cve>CVE-2024-12801</cve>
</suppress>
<suppress>
<packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-classic@.*$</packageUrl>
<cve>CVE-2023-6378</cve>
<cve>CVE-2023-6481</cve>
<cve>CVE-2024-12798</cve>
<cve>CVE-2024-12801</cve>
</suppress>
<!-- https://issues.apache.org/jira/browse/CASSANDRA-20024 -->
<suppress>
<packageUrl regex="true">^pkg:maven/org\.apache\.lucene/lucene\-.*@9.7.0$</packageUrl>
<cve>CVE-2024-45772</cve>
</suppress> </suppress>
</suppressions> </suppressions>

12
.snyk
View File

@ -4,18 +4,8 @@ version: v1.25.0
ignore: ignore:
CVE-2023-44487: CVE-2023-44487:
- reason: https://issues.apache.org/jira/browse/CASSANDRA-18943 -- ^pkg:maven/io\.netty/netty\-.*@.*$ - reason: https://issues.apache.org/jira/browse/CASSANDRA-18943 -- ^pkg:maven/io\.netty/netty\-.*@.*$
CVE-2023-6378:
- reason: Suppressed due to internal review, see project's .build/dependency-check-suppressions.xml
CVE-2023-6481:
- reason: Suppressed due to internal review, see project's .build/dependency-check-suppressions.xml
CVE-2024-12798:
- reason: Suppressed due to internal review, see project's .build/dependency-check-suppressions.xml
CVE-2024-12801:
- reason: Suppressed due to internal review, see project's .build/dependency-check-suppressions.xml
CVE-2024-29025: CVE-2024-29025:
- reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$ - reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$
CVE-2024-45772:
- reason: https://issues.apache.org/jira/browse/CASSANDRA-20024 -- ^pkg:maven/org\.apache\.lucene/lucene\-.*@9.7.0$
CVE-2024-47535: CVE-2024-47535:
- reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$ - reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$
CVE-2025-24970: CVE-2025-24970:
@ -28,3 +18,5 @@ ignore:
- reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$ - reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$
CVE-2025-58057: CVE-2025-58057:
- reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$ - reason: https://issues.apache.org/jira/browse/CASSANDRA-20924 -- ^pkg:maven/io\.netty/netty\-.*@.*$
CVE-2025-67735:
- reason: https://issues.apache.org/jira/browse/CASSANDRA-21159 -- ^pkg:maven/io\.netty/netty\-.*@.*$