natas_hw
/
cassandra
mirror of https://github.com/apache/cassandra
0
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Suppress CVE-2023-34455, CVE-2023-34454, CVE-2023-34453 

Patch by brandonwilliams; reviewed by bereng for CASSANDRA-18608
This commit is contained in:
Brandon Williams 2023-06-22 11:55:09 -05:00
parent e67fa69114
commit d99bccd649
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
.build/dependency-check-suppressions.xml
View File

@ -20,6 +20,13 @@
https://jeremylong.github.io/DependencyCheck/general/suppression.html
-->
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<suppress>
<!-- https://issues.apache.org/jira/browse/CASSANDRA-18608 -->
<packageUrl regex="true">^pkg:maven/org\.xerial\.snappy/snappy\-java@.*$</packageUrl>
<cve>CVE-2023-34453</cve>
<cve>CVE-2023-34454</cve>
<cve>CVE-2023-34455</cve>
</suppress>
<suppress>
<!-- https://issues.apache.org/jira/browse/CASSANDRA-16150 -->
<packageUrl regex="true">^pkg:maven/org\.yaml/snakeyaml@.*$</packageUrl>

1
CHANGES.txt
View File

@ -1,4 +1,5 @@
3.0.30
* Suppress CVE-2023-34455, CVE-2023-34454, CVE-2023-34453 (CASSANDRA-18608)
* Backport CASSANDRA-10508: Remove hard-coded SSL cipher suites (CASSANDRA-18575)
* Suppress CVE-2023-2976 (CASSANDRA-18562)
* Remove dh_python use in Debian packaging (CASSANDRA-18558)