From 9a64be32340829038e4895a667eda025d5219f1b Mon Sep 17 00:00:00 2001
From: Brandon Williams <brandonwilliams@apache.org>
Date: Thu, 12 Jan 2023 09:55:33 -0600
Subject: [PATCH] Suppress CVE-2021-1471, CVE-2021-3064, CVE-2021-4235

---
 .build/dependency-check-suppressions.xml | 3 +++
 CHANGES.txt                              | 1 +
 2 files changed, 4 insertions(+)

diff --git a/.build/dependency-check-suppressions.xml b/.build/dependency-check-suppressions.xml
index a41e5789bf..cfe34b74e5 100644
--- a/.build/dependency-check-suppressions.xml
+++ b/.build/dependency-check-suppressions.xml
@@ -29,6 +29,9 @@
         <cve>CVE-2022-41854</cve>
         <cve>CVE-2022-25857</cve>
         <cve>CVE-2022-38749</cve>
+        <cve>CVE-2021-1471</cve>
+        <cve>CVE-2021-3064</cve>
+        <cve>CVE-2021-4235</cve>
         <cve>CVE-2017-18640</cve>
     </suppress>
 
diff --git a/CHANGES.txt b/CHANGES.txt
index aec4a679f1..5600dc17fd 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -1,4 +1,5 @@
 3.0.29
+ * Suppress CVE-2021-1471, CVE-2021-3064, CVE-2021-4235 (CASSANDRA-18149)
  * Switch to snakeyaml's SafeConstructor (CASSANDRA-18150)
  * Expand build.dir property in rat targets (CASSANDRA-18183)
  * Suppress CVE-2022-41881 (CASSANDRA-18148)