Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Appearance settings

fix(fp): Consolidate/update icu4j suppressions for false positives #8062

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Oct 18, 2025
Merged

fix(fp): Consolidate/update icu4j suppressions for false positives #8062

merged 1 commit into from
Oct 18, 2025

Conversation

chadlwilson
Copy link
Collaborator

@chadlwilson chadlwilson commented Oct 17, 2025 •
edited
Loading

Description of Change

  • Update the list of suppressed icu4j CVEs for java due to lack of support for the target sw ecosystem.
  • Sorted it so it can be compared easily with the search
  • Consolidate into single suppression across multiple java packages for ease of maintenance

Reconciled with the NVD and checked all are C/C++.

Related issues

Have test cases been added to cover the new functionality?

N/A

@chadlwilson
fix(fp): Consolidate/update icu4j suppressions
8209b3c 
Signed-off-by: Chad Wilson <29788154+chadlwilson@users.noreply.github.com>
@boring-cyborg boring-cyborg bot added the core changes to core label Oct 17, 2025
jeremylong
jeremylong approved these changes Oct 18, 2025
View reviewed changes
Copy link
Collaborator

@jeremylong jeremylong left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@jeremylong jeremylong merged commit a574ca6 into dependency-check:main Oct 18, 2025
10 checks passed
@jeremylong jeremylong added this to the 12.1.9 milestone Oct 18, 2025
@chadlwilson chadlwilson deleted the update-icu4j-suppressions branch October 18, 2025 11:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jeremylong jeremylong jeremylong approved these changes

Assignees

No one assigned

Labels

core changes to core

Projects

None yet

Milestone

12.1.9

Development

Successfully merging this pull request may close these issues.

2 participants

@chadlwilson @jeremylong
Morty Proxy This is a proxified and sanitized view of the page, visit original site.