From 393901a85842b952a25e2c2d6dfc4de6d0d59c2c Mon Sep 17 00:00:00 2001
From: Brandon Williams <brandonwilliams@apache.org>
Date: Thu, 6 Mar 2025 12:36:32 -0600
Subject: [PATCH 1/2] Suppress CVE-2024-12798

Patch by brandonwilliams; reviewed by smiklosovic for CASSANDRA-20408
---
 .build/dependency-check-suppressions.xml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.build/dependency-check-suppressions.xml b/.build/dependency-check-suppressions.xml
index f8bf01b41f..a25230a60b 100644
--- a/.build/dependency-check-suppressions.xml
+++ b/.build/dependency-check-suppressions.xml
@@ -63,9 +63,11 @@
     <suppress>
         <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-core@.*$</packageUrl>
         <cve>CVE-2023-6378</cve>
+        <cve>CVE-2024-12798</cve>
     </suppress>
     <suppress>
         <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-classic@.*$</packageUrl>
         <cve>CVE-2023-6378</cve>
+        <cve>CVE-2024-12798</cve>
     </suppress>
 </suppressions>

From 0e0ff79dd6b1b10bafcef93ab2437d707716716f Mon Sep 17 00:00:00 2001
From: Brandon Williams <brandonwilliams@apache.org>
Date: Thu, 6 Mar 2025 12:38:23 -0600
Subject: [PATCH 2/2] Suppress CVE-2024-12798

Patch by brandonwilliams; reviewed by smiklosovic for CASSANDRA-20408
---
 .build/owasp/dependency-check-suppressions.xml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.build/owasp/dependency-check-suppressions.xml b/.build/owasp/dependency-check-suppressions.xml
index 994f3cb395..a6a2816d95 100644
--- a/.build/owasp/dependency-check-suppressions.xml
+++ b/.build/owasp/dependency-check-suppressions.xml
@@ -51,11 +51,13 @@
         <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-core@.*$</packageUrl>
         <cve>CVE-2023-6378</cve>
         <cve>CVE-2023-6481</cve>
+        <cve>CVE-2024-12798</cve>
     </suppress>
     <suppress>
         <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-classic@.*$</packageUrl>
         <cve>CVE-2023-6378</cve>
         <cve>CVE-2023-6481</cve>
+        <cve>CVE-2024-12798</cve>
     </suppress>
 
     <!-- https://issues.apache.org/jira/browse/CASSANDRA-20024 -->