summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorMarkus Pettersson <markus.pettersson@mullvad.net>2024-09-06 16:30:46 +0200
committerMarkus Pettersson <markus.pettersson@mullvad.net>2024-09-06 16:30:46 +0200
commitebdab8cbc6dba3f8f015daeb3fb331be4f4a8631 (patch)
treea480195391ad437bce787d732d881f3cb4c7dfbb
parentf0e121db89057278682ed3c05472df4705162d90 (diff)
parenta4e236ad8666761fb28e8a787126edbf9a350e2e (diff)
downloadmullvadvpn-ebdab8cbc6dba3f8f015daeb3fb331be4f4a8631.tar.xz
mullvadvpn-ebdab8cbc6dba3f8f015daeb3fb331be4f4a8631.zip
Merge branch 'silence-RUSTSEC-2024-0370-in-osv-scanner'
-rw-r--r--osv-scanner.toml8
1 files changed, 8 insertions, 0 deletions
diff --git a/osv-scanner.toml b/osv-scanner.toml
index 0349695942..02b1479177 100644
--- a/osv-scanner.toml
+++ b/osv-scanner.toml
@@ -50,3 +50,11 @@ KyberSlash is not exploitable in our usage of it:
https://mullvad.net/en/blog/mullvads-usage-of-kyber-is-not-affected-by-kyberslash
And no patched version is available.
"""
+
+[[IgnoredVulns]]
+id = "RUSTSEC-2024-0370"
+ignoreUntil = 2024-12-06
+reason = """
+proc-macro-error is unmaintained, but it does not necessarily contain any vulns.
+Will be fixed by bumping `nftnl`.
+"""