summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorJonatan Rhodin <jonatan.rhodin@mullvad.net>2025-06-13 15:37:44 +0200
committerJonatan Rhodin <jonatan.rhodin@mullvad.net>2025-06-13 15:37:44 +0200
commitc6dcd53ffd6e7bb484740bc9bb7d8892c0736b37 (patch)
treeb919efe95df2e80e3303e1643d073545a21edc08
parent0465c3410258476ca326d62c50e660d284506836 (diff)
parente31ee70189ba51438f51458d79257a8cf758048a (diff)
downloadmullvadvpn-c6dcd53ffd6e7bb484740bc9bb7d8892c0736b37.tar.xz
mullvadvpn-c6dcd53ffd6e7bb484740bc9bb7d8892c0736b37.zip
Merge branch 'bump-netty-vulns'
-rw-r--r--android/gradle/osv-scanner.toml6
1 files changed, 3 insertions, 3 deletions
diff --git a/android/gradle/osv-scanner.toml b/android/gradle/osv-scanner.toml
index d6afee5a68..c45494e182 100644
--- a/android/gradle/osv-scanner.toml
+++ b/android/gradle/osv-scanner.toml
@@ -73,17 +73,17 @@ reason = "This CVE only affect Multiplatform Gradle Projects, which this project
# netty: Denial of Service attack on windows app
[[IgnoredVulns]]
id = "CVE-2024-47535" # GHSA-xq3w-v528-46rv
-ignoreUntil = 2025-06-13
+ignoreUntil = 2025-09-13
reason = "Only impacting Windows."
# netty: Denial of Service attack on windows app
[[IgnoredVulns]]
id = "CVE-2025-25193" # GHSA-389x-839f-4rhx
-ignoreUntil = 2025-06-13
+ignoreUntil = 2025-09-13
reason = "Only impacting Windows."
# netty: Crash when using native SSLEngine
[[IgnoredVulns]]
id = "CVE-2025-24970" # GHSA-4g8c-wm8x-jfhw
-ignoreUntil = 2025-06-13
+ignoreUntil = 2025-09-13
reason = "Netty is not used in conjunction with SSL."