Update dependency check

airsonic-main/cve-suppressed.xml

@@ -168,4 +168,39 @@
         <gav regex="true">^com\.sun\.xml\.bind\.external:relaxng-datatype:.*</gav>
         <cve>CVE-2018-18749</cve>
     </suppress>
+    <suppress>
+        <notes>False positive for jflac-codec</notes>
+        <gav regex="true">.*jflac-codec.*</gav>
+        <cve>CVE-2018-14948</cve>
+    </suppress>
+    <suppress>
+        <notes>We do not enable default typing for jackson</notes>
+        <gav regex="true">.*jackson-databind.*</gav>
+        <cve>CVE-2019-12814</cve>
+    </suppress>
+    <suppress>
+        <notes>We do not sue the liquibase sdk</notes>
+        <filePath regex="true">.*liquibase/sdk/.*</filePath>
+        <cvssBelow>9.0</cvssBelow>
+    </suppress>
+    <suppress>
+        <notes>False positive for tomcat vuln in eclipse jetty/jasper compat lib</notes>
+        <gav regex="true">^org\.mortbay\.jasper:apache-jsp:.*$</gav>
+        <cve>CVE-2016-5425</cve>
+    </suppress>
+    <suppress>
+        <notes>False positive for tomcat vuln in eclipse jetty/jasper compat lib</notes>
+        <gav regex="true">^org\.mortbay\.jasper:apache-jsp:.*$</gav>
+        <cve>CVE-2017-6056</cve>
+    </suppress>
+    <suppress>
+        <notes>False positive for tomcat vuln in eclipse jetty/jasper compat lib</notes>
+        <gav regex="true">^org\.mortbay\.jasper:apache-jsp:.*$</gav>
+        <cve>CVE-2019-10072</cve>
+    </suppress>
+    <suppress>
+        <notes>This cve is for apache standard taglibs before 1.2.3. However jstl:1.2 is a separate PROVIDED lib</notes>
+        <gav regex="true">^javax\.servlet:jstl:.*$</gav>
+        <cve>CVE-2015-0254</cve>
+    </suppress>
 </suppressions>

airsonic-main/pom.xml

@@ -538,7 +538,7 @@
         <dependency>
             <groupId>org.postgresql</groupId>
             <artifactId>postgresql</artifactId>
-            <version>42.1.4</version>
+            <version>42.2.5</version>
             <scope>runtime</scope>
         </dependency>
         <dependency>