Suppress CVE-2022-45688

Patch by brandonwilliams; reviewed by bereng for CASSANDRA-18389
This commit is contained in:
Brandon Williams 2023-03-30 10:14:07 -05:00
parent ee586b53c2
commit d41e69a652
2 changed files with 6 additions and 0 deletions

View File

@ -114,5 +114,10 @@
<cve>CVE-2022-42003</cve>
<cve>CVE-2022-42004</cve>
</suppress>
<!-- https://issues.apache.org/jira/browse/CASSANDRA-18389 -->
<suppress>
<packageUrl regex="true">^pkg:maven/com\.fasterxml\.jackson\.core/jackson\-core.*$</packageUrl>
<cve>CVE-2022-45688</cve>
</suppress>
</suppressions>

View File

@ -1,4 +1,5 @@
3.11.15
* Suppress CVE-2022-45688 (CASSANDRA-18389)
* Fix Splitter sometimes creating more splits than requested (CASSANDRA-18013)
Merged from 3.0:
* Save host id to system.local and flush immediately after startup (CASSANDRA-18153)