From 9cf3313f31098ed04fedd95b13090fb2040865a0 Mon Sep 17 00:00:00 2001
From: Jeremy Long <jeremy.long@gmail.com>
Date: Tue, 16 Jan 2018 08:28:28 -0500
Subject: [PATCH] patch for issue #1060

---
 .../src/main/resources/dependencycheck-base-hint.xml   |  8 ++++++++
 .../resources/dependencycheck-base-suppression.xml     | 10 +++++++++-
 2 files changed, 17 insertions(+), 1 deletion(-)

diff --git a/dependency-check-core/src/main/resources/dependencycheck-base-hint.xml b/dependency-check-core/src/main/resources/dependencycheck-base-hint.xml
index 3bcffc03e..1015a8dd4 100644
--- a/dependency-check-core/src/main/resources/dependencycheck-base-hint.xml
+++ b/dependency-check-core/src/main/resources/dependencycheck-base-hint.xml
@@ -36,6 +36,14 @@
             <evidence type="vendor" source="hint analyzer" name="vendor" value="pivotal software" confidence="HIGH"/>
         </add>
     </hint>
+    <hint>
+        <given>
+            <evidence type="product" source="Manifest" name="Implementation-Title" regex="true" value="spring-.*" confidence="HIGH"/>
+        </given>
+        <add>
+            <evidence type="vendor" source="hint analyzer" name="vendor" value="pivotal software" confidence="HIGHEST"/>
+        </add>
+    </hint>
     <hint>
         <given>
             <evidence type="product" source="Manifest" name="Bundle-Name" value="Spring Security Core" confidence="MEDIUM"/>
diff --git a/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml b/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
index 39c5a7443..c68350fdf 100644
--- a/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
+++ b/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
@@ -1064,7 +1064,15 @@
         <gav regex="true">^org\.codehaus\.plexus:plexus-utils:.*$</gav>
         <cpe>cpe:/a:spice_project:spice</cpe>
     </suppress>
-
+    <suppress base="true">
+       <notes><![CDATA[
+       spring ldap cleanup per issue #1060
+       ]]></notes>
+       <gav regex="true">^org\.springframework\.ldap:spring-ldap-core:.*$</gav>
+       <cpe>cpe:/a:net-ldap_project:net-ldap</cpe>
+       <cpe>cpe:/a:pivotal_software:spring_framework</cpe>
+       <cpe>cpe:/a:pivotal:spring_framework</cpe>
+    </suppress>
 
     <suppress base="true">
         <notes><![CDATA[