suppressed vulnerabiltiy warning in build, for Postgres JDBC-Driver,

since it's a vulnerability in Postgre itself
Signed-off-by:Manuel Müller <manuel.mueller@geekinbusiness.de>
master
Manuel Müller 7 years ago
parent 5e47bc500e
commit 524d8da190
  1. 6
      airsonic-main/cve-suppressed.xml

@ -108,4 +108,10 @@
<gav regex="true">^org\.eclipse\.jetty\..*$</gav>
<cpe>cpe:/a:mortbay_jetty:jetty</cpe>
</suppress>
<!--Vulnerabilty lies in Database Clusterscripts-->
<suppress>
<notes><![CDATA[file name: postgresql-42.1.4.jar]]></notes>
<gav regex="true">^org\.postgresql:postgresql:.*$</gav>
<cve>CVE-2017-8806</cve>
</suppress>
</suppressions>

Loading…
Cancel
Save