Skip to content

Commit f551343

Browse files
authored
fix(fp): remove iicu4j FP (#7707)
2 parents 0e0cd58 + 6296163 commit f551343

File tree

1 file changed

+34
-0
lines changed

1 file changed

+34
-0
lines changed

core/src/main/resources/dependencycheck-base-suppression.xml

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2630,6 +2630,40 @@
26302630
<cpe>cpe:/a:apple:java</cpe>
26312631
<cpe>cpe:/a:unicode:unicode:</cpe>
26322632
</suppress>
2633+
<suppress base="true">
2634+
<notes><![CDATA[
2635+
False positive per issue #7706; DUPlICATE of above rule
2636+
the CVEs listed are in the C++ part of the ICU project (and are currently all CVEs listed
2637+
against ICU project; nevertheless we should not suppress the CPE itself to avoid false negatives
2638+
when the CVE is in the icu4j (cpe:2.3:a:icu-project:international_components_for_unicode:*:*:*:*:*:java:*:*
2639+
/ cpe:2.3:a:unicode:international_components_for_unicode:*:*:*:*:*:java:*:*) CPE
2640+
cpe cpe:/a:unicode:unicode is the unicode specification
2641+
]]></notes>
2642+
<packageUrl regex="true">^pkg:maven/org\.graalvm\.shadowed/icu4j@.*$</packageUrl>
2643+
<cve>CVE-2020-21913</cve>
2644+
<cve>CVE-2014-9654</cve>
2645+
<cve>CVE-2014-9911</cve>
2646+
<cve>CVE-2016-6293</cve>
2647+
<cve>CVE-2016-7415</cve>
2648+
<cve>CVE-2017-14952</cve>
2649+
<cve>CVE-2017-17484</cve>
2650+
<cve>CVE-2015-5922</cve>
2651+
<cve>CVE-2007-4771</cve>
2652+
<cve>CVE-2020-10531</cve>
2653+
<cve>CVE-2011-4599</cve>
2654+
<cve>CVE-2014-7923</cve>
2655+
<cve>CVE-2014-7926</cve>
2656+
<cve>CVE-2014-7940</cve>
2657+
<cve>CVE-2014-8146</cve>
2658+
<cve>CVE-2014-8147</cve>
2659+
<cve>CVE-2017-7867</cve>
2660+
<cve>CVE-2017-7868</cve>
2661+
<cve>CVE-2007-4770</cve>
2662+
<cve>CVE-2017-15396</cve>
2663+
<cve>CVE-2017-15422</cve>
2664+
<cpe>cpe:/a:apple:java</cpe>
2665+
<cpe>cpe:/a:unicode:unicode:</cpe>
2666+
</suppress>
26332667
<suppress base="true">
26342668
<notes><![CDATA[
26352669
False positive per issue #854

0 commit comments

Comments
 (0)