From fe71dfd7a15ded62b70eee4a2981d54baf35be8d Mon Sep 17 00:00:00 2001
From: Brandon Williams <brandonwilliams@apache.org>
Date: Fri, 20 Jan 2023 10:40:52 -0600
Subject: [PATCH] Suppress CVE-2022-41881

Patch by brandonwilliams; reviewed by bereng for CASSANDRA-18148
---
 .build/dependency-check-suppressions.xml | 1 +
 CHANGES.txt                              | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.build/dependency-check-suppressions.xml b/.build/dependency-check-suppressions.xml
index 3717985c95..a41e5789bf 100644
--- a/.build/dependency-check-suppressions.xml
+++ b/.build/dependency-check-suppressions.xml
@@ -46,6 +46,7 @@
         <cve>CVE-2021-37137</cve>
         <cve>CVE-2021-43797</cve>
         <cve>CVE-2022-24823</cve>
+        <cve>CVE-2022-41881</cve>
     </suppress>
 
     <!-- https://issues.apache.org/jira/browse/CASSANDRA-14183 -->
diff --git a/CHANGES.txt b/CHANGES.txt
index 668b792a36..7da1d4281f 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -1,4 +1,5 @@
 3.0.29
+ * Suppress CVE-2022-41881 (CASSANDRA-18148)
  * Default role is created with zero timestamp (CASSANDRA-12525)
  * Suppress CVE-2021-37533 (CASSANDRA-18146)
  * Add to the IntelliJ Git Window issue navigation links to Cassandra's Jira (CASSANDRA-18126)