From 4a66f68cba8b8b3c27c387eac88463579115770f Mon Sep 17 00:00:00 2001
From: Brandon Williams <brandonwilliams@apache.org>
Date: Thu, 6 Mar 2025 12:21:20 -0600
Subject: [PATCH 1/2] Suppress CVE-2024-12801

Patch by brandonwilliams; reviewed by smiklosovic for CASSANDRA-20412
---
 .build/dependency-check-suppressions.xml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.build/dependency-check-suppressions.xml b/.build/dependency-check-suppressions.xml
index a25230a60b..4cdcc9149c 100644
--- a/.build/dependency-check-suppressions.xml
+++ b/.build/dependency-check-suppressions.xml
@@ -60,14 +60,17 @@
     </suppress>
 
     <!-- https://issues.apache.org/jira/browse/CASSANDRA-19142 -->
+    <!-- https://issues.apache.org/jira/browse/CASSANDRA-20412 -->
     <suppress>
         <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-core@.*$</packageUrl>
         <cve>CVE-2023-6378</cve>
         <cve>CVE-2024-12798</cve>
+        <cve>CVE-2024-12801</cve>
     </suppress>
     <suppress>
         <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-classic@.*$</packageUrl>
         <cve>CVE-2023-6378</cve>
         <cve>CVE-2024-12798</cve>
+        <cve>CVE-2024-12801</cve>
     </suppress>
 </suppressions>

From d509d2fcbe70d50013a9982f97832b3049d681f2 Mon Sep 17 00:00:00 2001
From: Brandon Williams <brandonwilliams@apache.org>
Date: Thu, 6 Mar 2025 12:25:00 -0600
Subject: [PATCH 2/2] Suppress CVE-2024-12801

Patch by brandonwilliams; reviewed by smiklosovic for CASSANDRA-20412
---
 .build/owasp/dependency-check-suppressions.xml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.build/owasp/dependency-check-suppressions.xml b/.build/owasp/dependency-check-suppressions.xml
index a6a2816d95..987b29d185 100644
--- a/.build/owasp/dependency-check-suppressions.xml
+++ b/.build/owasp/dependency-check-suppressions.xml
@@ -47,17 +47,20 @@
     </suppress>
 
     <!-- https://issues.apache.org/jira/browse/CASSANDRA-19142 -->
+    <!-- https://issues.apache.org/jira/browse/CASSANDRA-20412 -->
     <suppress>
         <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-core@.*$</packageUrl>
         <cve>CVE-2023-6378</cve>
         <cve>CVE-2023-6481</cve>
         <cve>CVE-2024-12798</cve>
+        <cve>CVE-2024-12801</cve>
     </suppress>
     <suppress>
         <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-classic@.*$</packageUrl>
         <cve>CVE-2023-6378</cve>
         <cve>CVE-2023-6481</cve>
         <cve>CVE-2024-12798</cve>
+        <cve>CVE-2024-12801</cve>
     </suppress>
 
     <!-- https://issues.apache.org/jira/browse/CASSANDRA-20024 -->