From 54e1237320e6b5e067a3424f6bccb256065dd7f7 Mon Sep 17 00:00:00 2001
From: Andrew DeMaria <lostonamountain@gmail.com>
Date: Wed, 27 Mar 2019 19:00:14 -0600
Subject: [PATCH] Exclude new spring 5.0.5 cve

---
 airsonic-main/cve-suppressed.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/airsonic-main/cve-suppressed.xml b/airsonic-main/cve-suppressed.xml
index 152e4de7..8666d322 100644
--- a/airsonic-main/cve-suppressed.xml
+++ b/airsonic-main/cve-suppressed.xml
@@ -163,4 +163,9 @@
        <gav regex="true">.*slf4j.*</gav>
        <cve>CVE-2018-8088</cve>
     </suppress>
+    <suppress>
+       <notes><![CDATA[This only impacts spring 5.0.5 which we dont use]]></notes>
+       <gav regex="true">.*spring.*</gav>
+       <cve>CVE-2018-1258</cve>
+    </suppress>
 </suppressions>