File tree Expand file tree Collapse file tree 2 files changed +11
-2
lines changed
Expand file tree Collapse file tree 2 files changed +11
-2
lines changed Original file line number Diff line number Diff line change 378378 <packageUrl regex =" true" >^pkg:maven/org\.springframework/spring-web@.*$</packageUrl >
379379 <vulnerabilityName >CVE-2024-38828</vulnerabilityName >
380380 </suppress >
381+
382+ <!-- We don't use the sun.io.useCanonCaches setting referenced by this CVE. -->
383+ <suppress >
384+ <notes ><![CDATA[
385+ file name: tomcat-catalina-10.1.34.jar
386+ ]]> </notes >
387+ <packageUrl regex =" true" >^pkg:maven/org\.apache\.tomcat/tomcat-catalina@.*$</packageUrl >
388+ <vulnerabilityName >CVE-2024-56337</vulnerabilityName >
389+ </suppress >
381390</suppressions >
382391
Original file line number Diff line number Diff line change @@ -95,9 +95,9 @@ annotationsVersion=15.0
9595antVersion =1.10.13
9696
9797# Unifying version used by DISCVR and Premium
98- apacheDirectoryVersion =2.1.3
98+ apacheDirectoryVersion =2.1.7
9999# Transitive dependency of Apache directory: 2.0.18 contains some regressions
100- apacheMinaVersion =2.2.1
100+ apacheMinaVersion =2.2.4
101101
102102# Usually matches the version specified as a Spring Boot dependency (see springBootVersion below)
103103apacheTomcatVersion =10.1.34
You can’t perform that action at this time.
0 commit comments