Skip to content

Commit e850545

Browse files
authored
chore(fp): remove duplicate log4j FP suppressions (dependency-check#8468)
Signed-off-by: Chad Wilson <29788154+chadlwilson@users.noreply.github.com>
1 parent 9acbb33 commit e850545

1 file changed

Lines changed: 0 additions & 31 deletions

File tree

core/src/main/resources/dependencycheck-base-suppression.xml

Lines changed: 0 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -74,23 +74,6 @@
7474
<packageUrl regex="true">^pkg:maven/io\.quarkus/quarkus\-hibernate\-validator@.*$</packageUrl>
7575
<cpe>cpe:/a:redhat:hibernate_validator</cpe>
7676
</suppress>
77-
<suppress base="true">
78-
<notes><![CDATA[
79-
only log4j-core is vulnerable
80-
]]></notes>
81-
<packageUrl regex="true">^pkg:maven/org\.apache\.logging\.log4j/log4j\-slf4j\-impl@.*$</packageUrl>
82-
<cpe>cpe:/a:apache:log4j</cpe>
83-
</suppress>
84-
<suppress base="true">
85-
<notes><![CDATA[
86-
only log4j-core is vulnerable
87-
]]></notes>
88-
<packageUrl regex="true">^pkg:maven/org\.apache\.logging\.log4j/log4j\-(api|web)@.*$</packageUrl>
89-
<cve>CVE-2021-44228</cve>
90-
<cve>CVE-2021-44832</cve>
91-
<cve>CVE-2021-45046</cve>
92-
<cve>CVE-2021-45105</cve>
93-
</suppress>
9477
<suppress base="true">
9578
<notes><![CDATA[
9679
FP per #3778
@@ -1043,13 +1026,6 @@
10431026
<packageUrl regex="true">^pkg:maven/com\.typesafe\.play/shaded\-oauth@.*$</packageUrl>
10441027
<cpe>cpe:/a:playframework:play_framework</cpe>
10451028
</suppress>
1046-
<suppress base="true">
1047-
<notes><![CDATA[
1048-
FP per #2703
1049-
]]></notes>
1050-
<packageUrl regex="true">^pkg:maven/org\.slf4j/log4j\-over\-slf4j@.*$</packageUrl>
1051-
<cpe>cpe:/a:apache:log4j</cpe>
1052-
</suppress>
10531029
<suppress base="true">
10541030
<notes><![CDATA[
10551031
FP per #2768
@@ -4046,13 +4022,6 @@
40464022
<packageUrl regex="true">^pkg:maven/nginx\-clojure/nginx\-clojure@.*$</packageUrl>
40474023
<cpe>cpe:/a:nginx:nginx</cpe>
40484024
</suppress>
4049-
<suppress base="true">
4050-
<notes><![CDATA[
4051-
False positive as per #3868
4052-
]]></notes>
4053-
<packageUrl regex="true">^pkg:maven/org\.apache\.logging\.log4j/log4j\-to\-slf4j@.*$</packageUrl>
4054-
<cpe>cpe:/a:apache:log4j</cpe>
4055-
</suppress>
40564025
<suppress base="true">
40574026
<notes><![CDATA[
40584027
FP per #3889

0 commit comments

Comments
 (0)