cassandra-5.0: adv for GHSA-pr98-23f8-jwxv (#11040)

Signed-off-by: Dentrax <[email protected]>
wolfi-dev · Jan 3, 2025 · 57d647a · 57d647a
1 parent 12cf588
commit 57d647a
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/cassandra-5.0.advisories.yaml b/cassandra-5.0.advisories.yaml
@@ -204,6 +204,10 @@ advisories:
             componentType: java-archive
             componentLocation: /usr/share/java/cassandra/lib/logback-core-1.2.12.jar
             scanner: grype
+      - timestamp: 2024-12-28T17:51:14Z
+        type: pending-upstream-fix
+        data:
+          note: Bumping the logback-core to 1.5.13 resulting build failure. Upstream should update the LogbackLoggingSupport.java to migrate to newer version of this dependency.
 
   - id: CGA-jj3r-w482-76m6
     aliases: