diff options
| author | Albin <albin@mullvad.net> | 2022-12-16 12:01:03 +0100 |
|---|---|---|
| committer | Albin <albin@mullvad.net> | 2022-12-16 13:07:27 +0100 |
| commit | 8c925eb4bc8d27fc611fa0a4496a62b1c7d0b7da (patch) | |
| tree | 90672849e4a8b42fe56d12d306f6a0ab966d5304 /android/config | |
| parent | 4cb9f49b1091c5faac501330a8c3574da8b044e6 (diff) | |
| download | mullvadvpn-8c925eb4bc8d27fc611fa0a4496a62b1c7d0b7da.tar.xz mullvadvpn-8c925eb4bc8d27fc611fa0a4496a62b1c7d0b7da.zip | |
Update compose to 1.3.2
This fixes the following transitive CVEs in Compose:
- CVE-2022-3171
- CVE-2022-3510
However, the mentioned CVEs are still present via the
espresso-contrib dependency.
Diffstat (limited to 'android/config')
| -rw-r--r-- | android/config/dependency-check-suppression.xml | 11 |
1 files changed, 0 insertions, 11 deletions
diff --git a/android/config/dependency-check-suppression.xml b/android/config/dependency-check-suppression.xml index 590a2a5793..6c2b87af56 100644 --- a/android/config/dependency-check-suppression.xml +++ b/android/config/dependency-check-suppression.xml @@ -17,17 +17,6 @@ File name: protobuf-lite-3.0.1.jar ]]></notes> - <packageUrl regex="true">^pkg:maven/com\.google\.protobuf/protobuf\-javalite@.*$</packageUrl> - <cve>CVE-2022-3171</cve> - <cve>CVE-2022-3510</cve> - </suppress> - <suppress until="2023-05-01Z"> - <notes><![CDATA[ - This CVE only part of the debugAndroidTestRuntimeClasspath so suppressing in automatic - checks and tracking externally. - - File name: protobuf-lite-3.0.1.jar - ]]></notes> <packageUrl regex="true">^pkg:maven/com\.google\.protobuf/protobuf\-lite@.*$</packageUrl> <cve>CVE-2022-3171</cve> </suppress> |