From cfdedea452f4bc2c68863788c48bdc8ec852cb0e Mon Sep 17 00:00:00 2001
From: Peter Marheine <peter@taricorp.net>
Date: Tue, 31 Jul 2018 18:29:54 +1000
Subject: [PATCH] Suppress CVE-2018-13684 for dependency-check

False positive matching ant-zip against a CVE for ZIP, an Ethereum
token.

Signed-off-by: Peter Marheine <peter@taricorp.net>
---
 airsonic-main/cve-suppressed.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/airsonic-main/cve-suppressed.xml b/airsonic-main/cve-suppressed.xml
index 1ff88faf..14672569 100644
--- a/airsonic-main/cve-suppressed.xml
+++ b/airsonic-main/cve-suppressed.xml
@@ -129,4 +129,9 @@
         <gav regex="true">^org\.mariadb\.jdbc:mariadb-java-client:.*$</gav>
         <cve>CVE-2017-16046</cve>
     </suppress>
+    <suppress>
+       <notes><![CDATA[file name: ant-zip-1.6.2.jar]]></notes>
+       <gav regex="true">^ant-zip:ant-zip:.*$</gav>
+       <cve>CVE-2018-13684</cve>
+    </suppress>
 </suppressions>