Apache
/
druid
mirror of https://github.com/apache/druid.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Suppress CVE-2018-11765 for hadoop dependencies (#10485)

This commit is contained in:
Jonathan Wei 2020-10-07 21:55:34 -07:00 committed by GitHub
parent 7ce9ac4548
commit 0aa2a8e2c6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
owasp-dependency-check-suppressions.xml
View File

@ -281,4 +281,11 @@
<cve>CVE-2018-8009</cve>
<cve>CVE-2018-8029</cve>
</suppress>
<suppress>
<notes><![CDATA[
file name: hadoop-*-2.8.5.jar
]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.hadoop/hadoop\-.*@.*$</packageUrl>
<cve>CVE-2018-11765</cve>
</suppress>
</suppressions>