summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorAlbin <albin@mullvad.net>2023-09-14 00:09:34 +0200
committerAlbin <albin@mullvad.net>2023-09-14 00:09:38 +0200
commit761f7bedb21031a3b7ab6c8acd0899a97f13029a (patch)
tree3db4a1d3059e27fb3bcba0125ecd1d1e3436c7e4
parent0207bb30203844ff173a9939a8ee68f6ebbbcd45 (diff)
downloadmullvadvpn-761f7bedb21031a3b7ab6c8acd0899a97f13029a.tar.xz
mullvadvpn-761f7bedb21031a3b7ab6c8acd0899a97f13029a.zip
Push suppression date for CVE-2023-2976
Pushing the suppression date since not much new information is available and no upstream release has been made of the affected library (espresso).
-rw-r--r--android/config/dependency-check-suppression.xml2
1 files changed, 1 insertions, 1 deletions
diff --git a/android/config/dependency-check-suppression.xml b/android/config/dependency-check-suppression.xml
index adb49410dc..a11437256e 100644
--- a/android/config/dependency-check-suppression.xml
+++ b/android/config/dependency-check-suppression.xml
@@ -10,7 +10,7 @@
<packageUrl regex="true">^pkg:maven/com\.google\.guava/guava@.*$</packageUrl>
<cve>CVE-2020-8908</cve>
</suppress>
- <suppress until="2023-09-01Z">
+ <suppress until="2024-03-01Z">
<notes><![CDATA[
This CVE only part of the debugAndroidTestRuntimeClasspath so suppressing in automatic
checks and tracking externally.