cassandra-5.0/5.0.6-r2: cve remediation (#77692)

cassandra-5.0/5.0.6-r2: fix GHSA-gm62-rw4g-vrc4
<!--ci-cve-scan:must-fix: GHSA-gm62-rw4g-vrc4-->


Advisory data:
https://github.com/wolfi-dev/advisories/blob/main/cassandra-5.0.advisories.yaml

---

### "Breadcrumbs" for this automated service

- **Source Code:** https://go/cve-remedy-automation-source
- **Logs:** https://go/cve-remedy-automation-logs
- **Docs:** _(not provided yet)_


Inspected git repositories:
https://github.com/apache/cassandra@cassandra-5.0.6

Co-authored-by: octo-sts[bot] <157150467+octo-sts@users.noreply.github.com>

Author: octo-sts[bot]

cassandra-5.0.yaml

@@ -1,7 +1,7 @@
 package:
   name: cassandra-5.0
   version: "5.0.6"
-  epoch: 2
+  epoch: 3 # GHSA-gm62-rw4g-vrc4
   description: Open Source NoSQL Database
   copyright:
     - license: Apache-2.0

cassandra-5.0/pombump-deps.yaml

@@ -17,3 +17,6 @@ patches:
   - groupId: io.netty
     artifactId: netty-codec
     version: 4.1.125.Final
+  - groupId: ch.qos.logback
+    artifactId: logback-core
+    version: 1.2.13