From c7adb1bb65cb4bc407198bb96faca2ee3611e0c9 Mon Sep 17 00:00:00 2001
From: Jeremy Long <jeremy.long@gmail.com>
Date: Tue, 4 Apr 2017 09:58:19 -0400
Subject: [PATCH] fix for issue #684

---
 .../main/resources/dependencycheck-base-suppression.xml  | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml b/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
index 34e1d4118..70266886e 100644
--- a/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
+++ b/dependency-check-core/src/main/resources/dependencycheck-base-suppression.xml
@@ -545,4 +545,13 @@
         <gav regex="true">^javax\.servlet:servlet-api:.*$</gav>
         <cpe>cpe:/a:sun:one_application_server</cpe>
     </suppress>
+    <suppress base="true">
+        <notes><![CDATA[
+        False positives per issue #684.
+        ]]></notes>
+        <gav regex="true">^org\.apache\.tomcat\.embed:tomcat-embed.*$</gav>
+        <cve>CVE-2017-6056</cve>
+        <cve>CVE-2016-6325</cve>
+        <cve>CVE-2016-5425</cve>
+    </suppress>
 </suppressions>