From a92de92b8c7628d9fb5085a4549ce9264ec05097 Mon Sep 17 00:00:00 2001
From: Brandon Williams <brandonwilliams@apache.org>
Date: Fri, 8 Dec 2023 05:55:45 -0600
Subject: [PATCH] Suppress CVE-2023-6481

Patch by brandonwilliams, reviewed by smiklosovic for CASSANDRA-19184
---
 .build/dependency-check-suppressions.xml | 2 ++
 CHANGES.txt                              | 1 +
 2 files changed, 3 insertions(+)

diff --git a/.build/dependency-check-suppressions.xml b/.build/dependency-check-suppressions.xml
index 6df50e874a..a4d9bd28c7 100644
--- a/.build/dependency-check-suppressions.xml
+++ b/.build/dependency-check-suppressions.xml
@@ -54,9 +54,11 @@
     <suppress>
         <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-core@.*$</packageUrl>
         <cve>CVE-2023-6378</cve>
+        <cve>CVE-2023-6481</cve>
     </suppress>
     <suppress>
         <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-classic@.*$</packageUrl>
         <cve>CVE-2023-6378</cve>
+        <cve>CVE-2023-6481</cve>
     </suppress>
 </suppressions>
diff --git a/CHANGES.txt b/CHANGES.txt
index bade13f0bd..4b5d36b708 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -1,4 +1,5 @@
 5.0-beta2
+ * Suppress CVE-2023-6481 (CASSANDRA-19184)
 Merged from 4.1:
  * Fix StackOverflowError on ALTER after many previous schema changes (CASSANDRA-19166)
 Merged from 4.0: