Merge pull request #529 from hmcts/RDCC-3246

fix cve removed suppressions
hmcts · Aug 2, 2022 · 211302d · 211302d
2 parents ceaec5c + 785b34c
commit 211302d
Showing 1 changed file with 2 additions and 11 deletions.
diff --git a/config/owasp/suppressions.xml b/config/owasp/suppressions.xml
@@ -18,7 +18,7 @@
     <packageUrl regex="true">^pkg:maven/io\.netty.*$</packageUrl>
     <cve>CVE-2021-43797</cve>
   </suppress>
-  <suppress until="2022-09-24">
+  <suppress until="2023-09-24">
     <packageUrl regex="true">^pkg:maven/org\.apache\.poi.*$</packageUrl>
     <cve>CVE-2022-26336</cve>
   </suppress>
@@ -28,19 +28,10 @@
     ]]></notes>
     <cve>CVE-2016-1000027</cve>
   </suppress>
-  <suppress until="2022-12-30">
+  <suppress until="2023-12-30">
     <notes><![CDATA[
     file name: tomcat-embed-core-9.0.63.jar
     ]]></notes>
     <cve>CVE-2022-34305</cve>
   </suppress>
-      <suppress until="2023-01-01">
-   <notes><![CDATA[
-   file name: log4j-core-2.17.1.jar
-   ]]></notes>
-        <cve>CVE-2022-33915</cve>
-    </suppress>
-    <suppress until="2023-01-01">
-        <cve>CVE-2022-31569</cve>
-    </suppress>
 </suppressions>