Skip to content

Commit 81e149c

Browse files
authored
Update generatedSuppressions.xml
Manually add the broad yaml-suppression and utils_project suppression to the hosted suppressions as they likely affect many artifacts
1 parent 21e6ea4 commit 81e149c

1 file changed

Lines changed: 16 additions & 1 deletion

File tree

generatedSuppressions.xml

Lines changed: 16 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -483,11 +483,26 @@
483483
<cpe>cpe:/a:apache:james</cpe>
484484
</suppress>
485485
<!-- suppressions above this entry will be included in the 7.4.3 release (see #5191) -->
486+
<suppress base="true">
487+
<notes><![CDATA[
488+
FP per issue #5213, CVEs for scripting pet projects
489+
]]></notes>
490+
<packageUrl regex="true">^.*$</packageUrl>
491+
<cve>CVE-2021-4277</cve>
492+
</suppress>
493+
<suppress base="true">
494+
<notes><![CDATA[
495+
cpe:/a:yaml_project:yaml is a YAML implementation in Go #5233 and #5234
496+
]]></notes>
497+
<filePath regex="true">.*(\.(dll|jar|ear|war|pom|nupkg|nuspec|aar)|pom\.xml|package.json|packages.config)$</filePath>
498+
<cpe>cpe:/a:yaml_project:yaml</cpe>
499+
</suppress>
500+
<!-- suppressions above this entry will be included in the next release (see #5237 and #5240) -->
486501

487502
<suppress base="true">
488503
<notes><![CDATA[
489504
FP per issue #5169
490505
]]></notes>
491506
<packageUrl regex="true">^pkg:maven/com\.google\.crypto\.tink/apps-webpush@.*$</packageUrl>
492507
<cpe>cpe:/a:google:google_apps</cpe>
493-
</suppress>
508+
</suppress>

0 commit comments

Comments
 (0)