[FP]: Jgroups Azure for CVE-2016-2141

[githubuserVenkat]

Package URl

pkg:maven/org.jgroups.azure/[email protected]

CPE

cpe:2.3:a:redhat:jgroups:1.2.0:::::::*

CVE

CVE-2016-2141

ODC Integration

None

ODC Version

9.0.5

Description

Keycloak 6.0.1 uses Jgroups version 4.0.18 and the component azure is an extension on top of jgroups to manage cluster membership.

[github-actions]

Maven Coordinates

<dependency>
   <groupId>org.jgroups.azure</groupId>
   <artifactId>jgroups-azure</artifactId>
   <version>1.2.0.Final</version>
</dependency>

Suppression rule:

<suppress base="true">
   <notes><![CDATA[
   FP per issue #6368
   ]]></notes>
   <packageUrl regex="true">^pkg:maven/org\.jgroups\.azure/jgroups-azure@.*$</packageUrl>
   <cpe>cpe:/a:redhat:jgroups</cpe>
</suppress>

Link to test results: https://github.com/jeremylong/DependencyCheck/actions/runs/7443736510

[aikebah]

approved

[github-actions]

Suppress rule has been added to the generatedSuppressions branch.