From 0027dee79ca8eeaa400c98ae06e6327b0a5d2d78 Mon Sep 17 00:00:00 2001
From: Trask Stalnaker <trask.stalnaker@gmail.com>
Date: Mon, 19 Jun 2023 19:34:11 -0700
Subject: [PATCH 1/2] Suppress invalid CVE

---
 buildscripts/dependency-check-suppressions.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/buildscripts/dependency-check-suppressions.xml b/buildscripts/dependency-check-suppressions.xml
index 8d3d79c55b7..5309ee2b4a2 100644
--- a/buildscripts/dependency-check-suppressions.xml
+++ b/buildscripts/dependency-check-suppressions.xml
@@ -15,4 +15,11 @@
     <packageUrl regex="true">^pkg:maven/org.slf4j/jcl-over-slf4j@.*$</packageUrl>
     <cpe>cpe:/a:apache:commons_net</cpe>
   </suppress>
+  <suppress>
+    <notes>
+      CVE-2023-35116 is not a valid CVE, see comment from library maintainer
+      https://github.com/FasterXML/jackson-databind/issues/3972#issuecomment-1596308216
+    </notes>
+    <cve>CVE-2023-35116</cve>
+  </suppress>
 </suppressions>

From 3481fd3d0642f7a79f6d37f8501552cce7eb4b73 Mon Sep 17 00:00:00 2001
From: Trask Stalnaker <trask.stalnaker@gmail.com>
Date: Mon, 19 Jun 2023 19:42:09 -0700
Subject: [PATCH 2/2] No longer needed

---
 buildscripts/dependency-check-suppressions.xml | 15 ---------------
 1 file changed, 15 deletions(-)

diff --git a/buildscripts/dependency-check-suppressions.xml b/buildscripts/dependency-check-suppressions.xml
index 5309ee2b4a2..5548d5106dc 100644
--- a/buildscripts/dependency-check-suppressions.xml
+++ b/buildscripts/dependency-check-suppressions.xml
@@ -1,20 +1,5 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
-  <suppress>
-    <notes>commons-codec should not be matched to commons_net</notes>
-    <packageUrl regex="true">^pkg:maven/commons-codec/commons-codec@.*$</packageUrl>
-    <cpe>cpe:/a:apache:commons_net</cpe>
-  </suppress>
-  <suppress>
-    <notes>commons-text should not be matched to commons_net</notes>
-    <packageUrl regex="true">^pkg:maven/org.apache.commons/commons-text@.*$</packageUrl>
-    <cpe>cpe:/a:apache:commons_net</cpe>
-  </suppress>
-  <suppress>
-    <notes>jcl-over-slf4j should not be matched to commons_net</notes>
-    <packageUrl regex="true">^pkg:maven/org.slf4j/jcl-over-slf4j@.*$</packageUrl>
-    <cpe>cpe:/a:apache:commons_net</cpe>
-  </suppress>
   <suppress>
     <notes>
       CVE-2023-35116 is not a valid CVE, see comment from library maintainer