<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
  <suppress>
    <notes><![CDATA[
   Hawtio console vulns; we aren't affected.
   ]]>    </notes>
    <packageUrl regex="true">^pkg:maven/org\.apache\.activemq/activemq\-client@.*$</packageUrl>
    <cve>CVE-2015-5183</cve>
    <cve>CVE-2015-5184</cve>
  </suppress>
  <suppress>
    <notes><![CDATA[
   CSRF in jolokia; we don't care.
   ]]>    </notes>
    <packageUrl regex="true">^pkg:maven/org\.apache\.activemq/activemq\-client@.*$</packageUrl>
    <cve>CVE-2015-5182</cve>
  </suppress>

</suppressions>
<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
  <suppress>
    <notes><![CDATA[
   Hawtio console vulns; we aren't affected.
   ]]>    </notes>
    <packageUrl regex="true">^pkg:maven/org\.apache\.activemq/activemq\-client@.*$</packageUrl>
    <cve>CVE-2015-5183</cve>
    <cve>CVE-2015-5184</cve>
  </suppress>
  <suppress>
    <notes><![CDATA[
   CSRF in jolokia; we don't care.
   ]]>    </notes>
    <packageUrl regex="true">^pkg:maven/org\.apache\.activemq/activemq\-client@.*$</packageUrl>
    <cve>CVE-2015-5182</cve>
  </suppress>
  <suppress>
    <notes><![CDATA[
    file name: javax.security.auth.message-1.0.0.v201108011116.jar, isn't geronimo!
    ]]></notes>
    <packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty\.orbit/javax\.security\.auth\.message@.*$</packageUrl>
    <cpe>cpe:/a:apache:geronimo</cpe>
  </suppress>
</suppressions>
Remove geronimo cpe from javax.security.auth
Remove geronimo cpe from javax.security.auth
