From a4118c1cf57523f0283aecf2679b6866b6e84565 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fran=C3=A7ois-Xavier=20Thomas?= <fx.thomas@gmail.com>
Date: Fri, 3 Jan 2020 23:59:28 +0100
Subject: [PATCH] Suppress CVE-2019-12418

---
 airsonic-main/cve-suppressed.xml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/airsonic-main/cve-suppressed.xml b/airsonic-main/cve-suppressed.xml
index 82a2ae70..52373235 100644
--- a/airsonic-main/cve-suppressed.xml
+++ b/airsonic-main/cve-suppressed.xml
@@ -210,4 +210,10 @@
         <gav regex="true">org.apache.tomcat.embed.*</gav>
         <cve>CVE-2019-17563</cve>
     </suppress>
+    <suppress>
+        <notes>We do not use FORM-based authentication in Tomcat</notes>
+        <gav regex="true">org.apache.tomcat.embed.*</gav>
+        <cve>CVE-2019-12418</cve>
+    </suppress>
+
 </suppressions>