From ee4cb7105226da06e808ad00edfdec413897ab8e Mon Sep 17 00:00:00 2001
From: Andrew DeMaria <lostonamountain@gmail.com>
Date: Tue, 8 Jan 2019 21:41:10 -0500
Subject: [PATCH] Ignore CVE-2018-8088 related to slf4j ext

---
 airsonic-main/cve-suppressed.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/airsonic-main/cve-suppressed.xml b/airsonic-main/cve-suppressed.xml
index 20c4a161..9a5c02a2 100644
--- a/airsonic-main/cve-suppressed.xml
+++ b/airsonic-main/cve-suppressed.xml
@@ -149,4 +149,9 @@
        <gav regex="true">^javax\.xml\.stream:stax.*$</gav>
        <cve>CVE-2017-16224</cve>
     </suppress>
+    <suppress>
+       <notes><![CDATA[We do not use slf4j ext]]></notes>
+       <gav regex="true">.*slf4j.*</gav>
+       <cve>CVE-2018-8088</cve>
+    </suppress>
 </suppressions>