diff --git a/.build/dependency-check-suppressions.xml b/.build/dependency-check-suppressions.xml index 02dbb8dd92..08bf3f7236 100644 --- a/.build/dependency-check-suppressions.xml +++ b/.build/dependency-check-suppressions.xml @@ -20,6 +20,13 @@ https://jeremylong.github.io/DependencyCheck/general/suppression.html --> + + + ^pkg:maven/org\.xerial\.snappy/snappy\-java@.*$ + CVE-2023-34453 + CVE-2023-34454 + CVE-2023-34455 + ^pkg:maven/org\.yaml/snakeyaml@.*$ diff --git a/CHANGES.txt b/CHANGES.txt index 6e0853c3a4..43b4cc40fb 100644 --- a/CHANGES.txt +++ b/CHANGES.txt @@ -1,4 +1,5 @@ 3.0.30 + * Suppress CVE-2023-34455, CVE-2023-34454, CVE-2023-34453 (CASSANDRA-18608) * Backport CASSANDRA-10508: Remove hard-coded SSL cipher suites (CASSANDRA-18575) * Suppress CVE-2023-2976 (CASSANDRA-18562) * Remove dh_python use in Debian packaging (CASSANDRA-18558)