From ff328ad8de91be7ca0ed30464162e525b4c89882 Mon Sep 17 00:00:00 2001
From: Will Mooreston <97046018+labkey-willm@users.noreply.github.com>
Date: Sat, 20 Apr 2024 17:25:00 -0700
Subject: [PATCH] suppress multiple CVEs for jfreechart (#807)

* suppress CVE-2024-22949 for jfreechart

* also suppress CVE-2023-52070 and CVE-2024-23076 for jfreechart
---
 dependencyCheckSuppression.xml | 33 +++++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)

diff --git a/dependencyCheckSuppression.xml b/dependencyCheckSuppression.xml
index 2c8c7f6d8e..ee70fc31ac 100644
--- a/dependencyCheckSuppression.xml
+++ b/dependencyCheckSuppression.xml
@@ -325,5 +325,38 @@
         <vulnerabilityName>CVE-2024-23080</vulnerabilityName>
     </suppress>
 
+    <!--
+    suppress CVE-2024-22949 for jfreechart, may become moot after subsequent upgrades
+    -->
+    <suppress>
+        <notes><![CDATA[
+   file name: jfreechart-1.0.19.jar
+   ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.jfree/jfreechart@.*$</packageUrl>
+        <vulnerabilityName>CVE-2024-22949</vulnerabilityName>
+    </suppress>
+
+    <!--
+    suppress CVE-2023-52070 for jfreechart, may become moot after subsequent upgrades
+    -->
+    <suppress>
+        <notes><![CDATA[
+   file name: jfreechart-1.0.19.jar
+   ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.jfree/jfreechart@.*$</packageUrl>
+        <vulnerabilityName>CVE-2023-52070</vulnerabilityName>
+    </suppress>
+
+    <!--
+    suppress CVE-2024-23076 for jfreechart, may become moot after subsequent upgrades
+    -->
+    <suppress>
+        <notes><![CDATA[
+   file name: jfreechart-1.0.19.jar
+   ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.jfree/jfreechart@.*$</packageUrl>
+        <vulnerabilityName>CVE-2024-23076</vulnerabilityName>
+    </suppress>
+
 </suppressions>