Suppress ambari metrics CVEs (#14645)

* Suppress ambari metrics CVEs
This commit is contained in:
AmatyaAvadhanula 2023-07-24 18:01:56 +05:30 committed by GitHub
parent 54f29fedce
commit 536e491d00
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -391,6 +391,13 @@
<packageUrl regex="true">^pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1$</packageUrl>
<cve>CVE-2022-33915</cve>
</suppress>
<suppress>
<notes><![CDATA[
file name: ambari-metrics-common-2.7.0.0.0.jar
]]></notes>
<cve>CVE-2022-45855</cve>
<cve>CVE-2022-42009</cve>
</suppress>
<suppress>
<!--
- TODO: The lastest version of ambari-metrics-common is 2.7.0.0.0, released in July 2018.