|
2630 | 2630 | <cpe>cpe:/a:apple:java</cpe> |
2631 | 2631 | <cpe>cpe:/a:unicode:unicode:</cpe> |
2632 | 2632 | </suppress> |
| 2633 | + <suppress base="true"> |
| 2634 | + <notes><![CDATA[ |
| 2635 | + False positive per issue #7706; DUPlICATE of above rule |
| 2636 | + the CVEs listed are in the C++ part of the ICU project (and are currently all CVEs listed |
| 2637 | + against ICU project; nevertheless we should not suppress the CPE itself to avoid false negatives |
| 2638 | + when the CVE is in the icu4j (cpe:2.3:a:icu-project:international_components_for_unicode:*:*:*:*:*:java:*:* |
| 2639 | + / cpe:2.3:a:unicode:international_components_for_unicode:*:*:*:*:*:java:*:*) CPE |
| 2640 | + cpe cpe:/a:unicode:unicode is the unicode specification |
| 2641 | + ]]></notes> |
| 2642 | + <packageUrl regex="true">^pkg:maven/org\.graalvm\.shadowed/icu4j@.*$</packageUrl> |
| 2643 | + <cve>CVE-2020-21913</cve> |
| 2644 | + <cve>CVE-2014-9654</cve> |
| 2645 | + <cve>CVE-2014-9911</cve> |
| 2646 | + <cve>CVE-2016-6293</cve> |
| 2647 | + <cve>CVE-2016-7415</cve> |
| 2648 | + <cve>CVE-2017-14952</cve> |
| 2649 | + <cve>CVE-2017-17484</cve> |
| 2650 | + <cve>CVE-2015-5922</cve> |
| 2651 | + <cve>CVE-2007-4771</cve> |
| 2652 | + <cve>CVE-2020-10531</cve> |
| 2653 | + <cve>CVE-2011-4599</cve> |
| 2654 | + <cve>CVE-2014-7923</cve> |
| 2655 | + <cve>CVE-2014-7926</cve> |
| 2656 | + <cve>CVE-2014-7940</cve> |
| 2657 | + <cve>CVE-2014-8146</cve> |
| 2658 | + <cve>CVE-2014-8147</cve> |
| 2659 | + <cve>CVE-2017-7867</cve> |
| 2660 | + <cve>CVE-2017-7868</cve> |
| 2661 | + <cve>CVE-2007-4770</cve> |
| 2662 | + <cve>CVE-2017-15396</cve> |
| 2663 | + <cve>CVE-2017-15422</cve> |
| 2664 | + <cpe>cpe:/a:apple:java</cpe> |
| 2665 | + <cpe>cpe:/a:unicode:unicode:</cpe> |
| 2666 | + </suppress> |
2633 | 2667 | <suppress base="true"> |
2634 | 2668 | <notes><![CDATA[ |
2635 | 2669 | False positive per issue #854 |
|
0 commit comments