From dbc368dc63c691633b43ec27573c32adb0957506 Mon Sep 17 00:00:00 2001
From: Amatya <amatya.avadhanula@imply.io>
Date: Mon, 24 Jul 2023 11:27:29 +0530
Subject: [PATCH 1/2] Suppress ambari metrics CVEs

---
 owasp-dependency-check-suppressions.xml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/owasp-dependency-check-suppressions.xml b/owasp-dependency-check-suppressions.xml
index 465d4cb0b1c2..3200eb89224a 100644
--- a/owasp-dependency-check-suppressions.xml
+++ b/owasp-dependency-check-suppressions.xml
@@ -391,6 +391,16 @@
     <packageUrl regex="true">^pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1$</packageUrl>
     <cve>CVE-2022-33915</cve>
   </suppress>
+  <suppress>
+       <!--
+         - TODO: The lastest version of ambari-metrics-common is 2.7.0.0.0, released in July 2018.
+         -->
+     <notes><![CDATA[
+     file name: ambari-metrics-common-2.7.0.0.0.jar
+    ]]></notes>
+    <cve>CVE-2022-45855</cve>
+    <cve>CVE-2022-42009</cve>
+  </suppress>
   <suppress>
     <!--
       - TODO: The lastest version of ambari-metrics-common is 2.7.0.0.0, released in July 2018.

From fe8a5ccd3eeb0e56d9031af6e6cf2df4c4f925d6 Mon Sep 17 00:00:00 2001
From: Amatya <amatya.avadhanula@imply.io>
Date: Mon, 24 Jul 2023 13:45:08 +0530
Subject: [PATCH 2/2] Remove unnecessary TODO

---
 owasp-dependency-check-suppressions.xml | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/owasp-dependency-check-suppressions.xml b/owasp-dependency-check-suppressions.xml
index 3200eb89224a..26766c11f1d9 100644
--- a/owasp-dependency-check-suppressions.xml
+++ b/owasp-dependency-check-suppressions.xml
@@ -392,9 +392,6 @@
     <cve>CVE-2022-33915</cve>
   </suppress>
   <suppress>
-       <!--
-         - TODO: The lastest version of ambari-metrics-common is 2.7.0.0.0, released in July 2018.
-         -->
      <notes><![CDATA[
      file name: ambari-metrics-common-2.7.0.0.0.jar
     ]]></notes>