From d635a5744762af2c3e64277811b8399160c7cb17 Mon Sep 17 00:00:00 2001
From: Marty Pradere <martyp@labkey.com>
Date: Tue, 12 Dec 2023 18:10:22 -0800
Subject: [PATCH] Suppress CVE-2023-6481 for logback. (#645)

---
 dependencyCheckSuppression.xml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/dependencyCheckSuppression.xml b/dependencyCheckSuppression.xml
index 4e5304545d..09410fafd6 100644
--- a/dependencyCheckSuppression.xml
+++ b/dependencyCheckSuppression.xml
@@ -16,6 +16,20 @@
         <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-core@.*$</packageUrl>
         <vulnerabilityName>CVE-2023-6378</vulnerabilityName>
     </suppress>
+    <suppress>
+        <notes><![CDATA[
+       file name: logback-classic-1.2.12.jar
+       ]]></notes>
+        <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-classic@.*$</packageUrl>
+        <vulnerabilityName>CVE-2023-6481</vulnerabilityName>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+        file name: logback-core-1.2.12.jar
+        ]]></notes>
+        <packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback\-core@.*$</packageUrl>
+        <vulnerabilityName>CVE-2023-6481</vulnerabilityName>
+    </suppress>
 
     <!-- Prevent match against unrelated "rengine" at https://github.com/yogeshojha/rengine -->
     <suppress>