natas_hw
/
cassandra
mirror of https://github.com/apache/cassandra
0
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Suppress CVE-2023-35116 

Patch by brandonwilliams; reviewed by bereng for CASSANDRA-18630
This commit is contained in:
Brandon Williams 2023-06-27 13:44:42 -05:00
parent a00d1de441
commit de7b1584f8
2 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
.build/dependency-check-suppressions.xml
View File

@ -133,4 +133,10 @@
<cve>CVE-2019-16335</cve>
<cve>CVE-2019-17267</cve>
</suppress>
<!-- https://issues.apache.org/jira/browse/CASSANDRA-18630 -->
<suppress>
<packageUrl regex="true">^pkg:maven/com\.fasterxml\.jackson\.core/jackson\-databind@.*$</packageUrl>
<cve>CVE-2023-35116</cve>
</suppress>
</suppressions>

1
CHANGES.txt
View File

@ -1,4 +1,5 @@
3.0.30
* Suppress CVE-2023-35116 (CASSANDRA-18630)
* Pass taskId from CompactionTask to system.compaction_history (CASSANDRA-12183)
* Suppress CVE-2023-34455, CVE-2023-34454, CVE-2023-34453 (CASSANDRA-18608)
* Backport CASSANDRA-10508: Remove hard-coded SSL cipher suites (CASSANDRA-18575)