MightyPork/airsonic-custom
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Exclude new spring 5.0.5 cve

Browse Source
This commit is contained in:
Andrew DeMaria
2019-03-27 19:00:14 -06:00
parent 5dc96ba011
commit 54e1237320
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
airsonic-main/cve-suppressed.xml
+5
View File
@@ -163,4 +163,9 @@
<gav regex="true">.*slf4j.*</gav> <gav regex="true">.*slf4j.*</gav>
<cve>CVE-2018-8088</cve> <cve>CVE-2018-8088</cve>
</suppress> </suppress>
<suppress>
<notes><![CDATA[This only impacts spring 5.0.5 which we dont use]]></notes>
<gav regex="true">.*spring.*</gav>
<cve>CVE-2018-1258</cve>
</suppress>
</suppressions> </suppressions>