diff --git a/generatedSuppressions.xml b/generatedSuppressions.xml index 5db97b236f..e6bca1dd1d 100644 --- a/generatedSuppressions.xml +++ b/generatedSuppressions.xml @@ -947,10 +947,15 @@ = 4.x - .main: published and versioned together under here + < 4.x - .core: published and versioned together under .core and other adjacent groups, simplified here to just .core + since this is 2011-era code likely to catch everything for NVD-only CVEs predating PURL and not maintained at package level. ]]> - ^pkg:maven/org\.glassfish(?!\.main).*$ + ^pkg:maven/(?!org\.glassfish\.(main|core)).*$ cpe:/a:eclipse:glassfish(:.*)?$ + cpe:/a:oracle:glassfish(:.*)?$ + cpe:/a:oracle:glassfish_server(:.*)?$ ^pkg:maven/fi\.solita\.clamav/clamav-client@.*$ cpe:/a:clamav:clamav(:.*)?$ - - - ^pkg:maven/jakarta\.json/jakarta\.json-api@.*$ - cpe:/a:eclipse:glassfish(:.*)?$ - - - - ^pkg:maven/org\.glassfish\.jaxb/jaxb-runtime@.*$ - cpe:/a:eclipse:glassfish(:.*)?$ - + ^pkg:maven/org\.springframework\.boot/spring-boot-batch@.*$ cpe:/a:pivotal_software:spring_batch(:.*)?$ - - - ^pkg:maven/com\.sun\.xml\.bind/jaxb-impl@.*$ - cpe:/a:eclipse:glassfish(:.*)?$ -