diff --git a/dependencyCheckSuppression.xml b/dependencyCheckSuppression.xml
index b6207e62cd..800b8ef002 100644
--- a/dependencyCheckSuppression.xml
+++ b/dependencyCheckSuppression.xml
@@ -164,4 +164,22 @@
         <packageUrl regex="true">^pkg:maven/org\.labkey\.api/labkey-api-jdbc@.*$</packageUrl>
         <cpe>cpe:/a:labkey:labkey_server</cpe>
     </suppress>
+
+    <!--
+    False positives from CVEs in the bzip2 Debian package
+    -->
+    <suppress>
+        <notes><![CDATA[
+        file name: bzip2-0.9.1.jar
+        ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.itadaki/bzip2@.*$</packageUrl>
+        <cpe>cpe:/a:bzip:bzip2</cpe>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+        file name: bzip2-0.9.1.jar
+        ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.itadaki/bzip2@.*$</packageUrl>
+        <cpe>cpe:/a:bzip2_project:bzip2</cpe>
+    </suppress>
 </suppressions>