summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorEnrico Olivelli <eolivelli@apache.org>2022-02-25 07:59:07 +0100
committerEnrico Olivelli <eolivelli@apache.org>2022-02-25 07:59:27 +0100
commitd4d39226c61cfd1eea734faa33616e9b20779b32 (patch)
treee58e6be4ce94a2031d2f7e800df9e817b90cabf0
parentd4fe0c64721a1bc0fa28ded40b07f5da79cae77e (diff)
downloadzookeeper-d4d39226c61cfd1eea734faa33616e9b20779b32.tar.gz
ZOOKEEPER-4478: Suppress OWASP false positives zookeeper-jute-3.8.0-SNAPSHOT.jar: CVE-2021-29425, CVE-2021-28164, CVE-2021-34429
Author: Enrico Olivelli <eolivelli@apache.org> Reviewers: Mate Szalay-Beko <symat@apache.org> Closes #1824 from eolivelli/ZOOKEEPER-4478-owasp (cherry picked from commit 3004c909b78b3056985c8e39925e14bde3baa430) Signed-off-by: Enrico Olivelli <eolivelli@apache.org>
-rw-r--r--owaspSuppressions.xml9
1 files changed, 9 insertions, 0 deletions
diff --git a/owaspSuppressions.xml b/owaspSuppressions.xml
index 4bfec6fd2..1325af983 100644
--- a/owaspSuppressions.xml
+++ b/owaspSuppressions.xml
@@ -53,4 +53,13 @@
this writing -->
<cve>CVE-2019-3826</cve>
</suppress>
+
+
+ <suppress>
+ <!-- Seems like false positives about zookeeper-jute -->
+ <cve>CVE-2021-29425</cve>
+ <cve>CVE-2021-28164</cve>
+ <cve>CVE-2021-34429</cve>
+ </suppress>
+
</suppressions>