diff --git a/dependency-check/suppressions.xml b/dependency-check/suppressions.xml new file mode 100644 index 000000000..47b1e5bd0 --- /dev/null +++ b/dependency-check/suppressions.xml @@ -0,0 +1,4 @@ + + + + diff --git a/droid-binary/dependency-check/suppressions.xml b/droid-binary/dependency-check/suppressions.xml new file mode 100644 index 000000000..65b9e0e1c --- /dev/null +++ b/droid-binary/dependency-check/suppressions.xml @@ -0,0 +1,53 @@ + + + + + ^pkg:maven/org\.springframework/spring\-core@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-tx@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-aop@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-jdbc@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-beans@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-context@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-expression@.*$ + CVE-2016-1000027 + + + diff --git a/droid-build-tools/dependency-check/suppressions.xml b/droid-build-tools/dependency-check/suppressions.xml new file mode 100644 index 000000000..47b1e5bd0 --- /dev/null +++ b/droid-build-tools/dependency-check/suppressions.xml @@ -0,0 +1,4 @@ + + + + diff --git a/droid-command-line/dependency-check/suppressions.xml b/droid-command-line/dependency-check/suppressions.xml new file mode 100644 index 000000000..65b9e0e1c --- /dev/null +++ b/droid-command-line/dependency-check/suppressions.xml @@ -0,0 +1,53 @@ + + + + + ^pkg:maven/org\.springframework/spring\-core@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-tx@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-aop@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-jdbc@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-beans@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-context@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-expression@.*$ + CVE-2016-1000027 + + + diff --git a/droid-container/dependency-check/suppressions.xml b/droid-container/dependency-check/suppressions.xml new file mode 100644 index 000000000..47b1e5bd0 --- /dev/null +++ b/droid-container/dependency-check/suppressions.xml @@ -0,0 +1,4 @@ + + + + diff --git a/droid-core-interfaces/dependency-check/suppressions.xml b/droid-core-interfaces/dependency-check/suppressions.xml new file mode 100644 index 000000000..47b1e5bd0 --- /dev/null +++ b/droid-core-interfaces/dependency-check/suppressions.xml @@ -0,0 +1,4 @@ + + + + diff --git a/droid-core/dependency-check/suppressions.xml b/droid-core/dependency-check/suppressions.xml new file mode 100644 index 000000000..47b1e5bd0 --- /dev/null +++ b/droid-core/dependency-check/suppressions.xml @@ -0,0 +1,4 @@ + + + + diff --git a/droid-export-interfaces/dependency-check/suppressions.xml b/droid-export-interfaces/dependency-check/suppressions.xml new file mode 100644 index 000000000..47b1e5bd0 --- /dev/null +++ b/droid-export-interfaces/dependency-check/suppressions.xml @@ -0,0 +1,4 @@ + + + + diff --git a/droid-export/dependency-check/suppressions.xml b/droid-export/dependency-check/suppressions.xml new file mode 100644 index 000000000..65b9e0e1c --- /dev/null +++ b/droid-export/dependency-check/suppressions.xml @@ -0,0 +1,53 @@ + + + + + ^pkg:maven/org\.springframework/spring\-core@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-tx@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-aop@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-jdbc@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-beans@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-context@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-expression@.*$ + CVE-2016-1000027 + + + diff --git a/droid-help/dependency-check/suppressions.xml b/droid-help/dependency-check/suppressions.xml new file mode 100644 index 000000000..47b1e5bd0 --- /dev/null +++ b/droid-help/dependency-check/suppressions.xml @@ -0,0 +1,4 @@ + + + + diff --git a/droid-parent/dependency-check/suppressions.xml b/droid-parent/dependency-check/suppressions.xml new file mode 100644 index 000000000..65b9e0e1c --- /dev/null +++ b/droid-parent/dependency-check/suppressions.xml @@ -0,0 +1,53 @@ + + + + + ^pkg:maven/org\.springframework/spring\-core@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-tx@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-aop@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-jdbc@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-beans@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-context@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-expression@.*$ + CVE-2016-1000027 + + + diff --git a/droid-parent/pom.xml b/droid-parent/pom.xml index 59b7126bb..ad20168d2 100644 --- a/droid-parent/pom.xml +++ b/droid-parent/pom.xml @@ -89,7 +89,7 @@ pronom@nationalarchives.gov.uk - 5.3.19 + 5.3.20 5.4.1.Final 10.13.1.1 3.5.2 @@ -295,6 +295,7 @@ 7.1.0 8 + ${project.basedir}/dependency-check/suppressions.xml @@ -350,6 +351,7 @@ *.db *.GIF *.PNG + **/suppressions.xml diff --git a/droid-report-interfaces/dependency-check/suppressions.xml b/droid-report-interfaces/dependency-check/suppressions.xml new file mode 100644 index 000000000..51734c0cf --- /dev/null +++ b/droid-report-interfaces/dependency-check/suppressions.xml @@ -0,0 +1,52 @@ + + + + + ^pkg:maven/org\.springframework/spring\-core@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-tx@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-aop@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-jdbc@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-beans@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-context@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-expression@.*$ + CVE-2016-1000027 + + diff --git a/droid-report/dependency-check/suppressions.xml b/droid-report/dependency-check/suppressions.xml new file mode 100644 index 000000000..65b9e0e1c --- /dev/null +++ b/droid-report/dependency-check/suppressions.xml @@ -0,0 +1,53 @@ + + + + + ^pkg:maven/org\.springframework/spring\-core@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-tx@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-aop@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-jdbc@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-beans@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-context@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-expression@.*$ + CVE-2016-1000027 + + + diff --git a/droid-results/dependency-check/suppressions.xml b/droid-results/dependency-check/suppressions.xml new file mode 100644 index 000000000..65b9e0e1c --- /dev/null +++ b/droid-results/dependency-check/suppressions.xml @@ -0,0 +1,53 @@ + + + + + ^pkg:maven/org\.springframework/spring\-core@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-tx@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-aop@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-jdbc@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-beans@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-context@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-expression@.*$ + CVE-2016-1000027 + + + diff --git a/droid-swing-ui/dependency-check/suppressions.xml b/droid-swing-ui/dependency-check/suppressions.xml new file mode 100644 index 000000000..65b9e0e1c --- /dev/null +++ b/droid-swing-ui/dependency-check/suppressions.xml @@ -0,0 +1,53 @@ + + + + + ^pkg:maven/org\.springframework/spring\-core@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-tx@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-aop@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-jdbc@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-beans@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-context@.*$ + CVE-2016-1000027 + + + + ^pkg:maven/org\.springframework/spring\-expression@.*$ + CVE-2016-1000027 + + + diff --git a/droid-tools/dependency-check/suppressions.xml b/droid-tools/dependency-check/suppressions.xml new file mode 100644 index 000000000..47b1e5bd0 --- /dev/null +++ b/droid-tools/dependency-check/suppressions.xml @@ -0,0 +1,4 @@ + + + + diff --git a/pom.xml b/pom.xml index 2949e822d..5d9c7fefb 100644 --- a/pom.xml +++ b/pom.xml @@ -54,6 +54,7 @@ appveyor.yml .gitattributes .github/** + **/suppressions.xml