suppressed vulnerabiltiy warning in build, for Postgres JDBC-Driver,

since it's a vulnerability in Postgre itself Signed-off-by:Manuel Müller <manuel.mueller@geekinbusiness.de>
2017-12-11 22:48:14 +01:00
parent 5e47bc500e
commit 524d8da190
1 changed files with 6 additions and 0 deletions
@@ -108,4 +108,10 @@
        <gav regex="true">^org\.eclipse\.jetty\..*$</gav>
        <cpe>cpe:/a:mortbay_jetty:jetty</cpe>
    </suppress>
+    <!--Vulnerabilty lies in Database Clusterscripts-->
+    <suppress>
+        <notes><![CDATA[file name: postgresql-42.1.4.jar]]></notes>
+        <gav regex="true">^org\.postgresql:postgresql:.*$</gav>
+        <cve>CVE-2017-8806</cve>
+    </suppress>
 </suppressions>