Update suppression.xml

Supressed CVEs: * CVE-2024-29857 * CVE-2024-30171
cryptomator · Apr 15, 2024 · 880cce4 · 880cce4
1 parent 3b1bb8e
commit 880cce4
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/suppression.xml b/suppression.xml
@@ -16,4 +16,24 @@
    		<packageUrl regex="true">^pkg:maven/org\.bouncycastle/bcprov\-jdk15on@.*$</packageUrl>
    		<cve>CVE-2023-33202</cve>
 	</suppress>
+	<suppress>
+   		<notes>
+			<![CDATA[
+   			file name: bcprov-jdk15on-1.70.jar
+			Library does not use asymmetric cryptograhpy
+   			]]>
+		</notes>
+   		<packageUrl regex="true">^pkg:maven/org\.bouncycastle/bcprov\-jdk15on@.*$</packageUrl>
+   		<vulnerabilityName>CVE-2024-29857</vulnerabilityName>
+	</suppress>
+	<suppress>
+   		<notes>
+			<![CDATA[
+   			file name: bcprov-jdk15on-1.70.jar
+			Library does not use asymmetric cryptograhpy
+   			]]>
+		</notes>
+   		<packageUrl regex="true">^pkg:maven/org\.bouncycastle/bcprov\-jdk15on@.*$</packageUrl>
+   		<vulnerabilityName>CVE-2024-30171</vulnerabilityName>
+	</suppress>
 </suppressions>