summaryrefslogtreecommitdiffhomepage
path: root/android/test
diff options
context:
space:
mode:
authorJonatan Rhodin <jonatan.rhodin@mullvad.net>2024-09-20 15:36:23 +0200
committerAlbin <albin@mullvad.net>2024-09-23 10:35:12 +0200
commit4d571edcf3d9f4a9af759c293a1d1f1eb55095df (patch)
tree82d4d261321bd250e2cc0e885321202b793b91ec /android/test
parent5cadd01fe2b9b1b24942328002bafa2c565522c2 (diff)
downloadmullvadvpn-4d571edcf3d9f4a9af759c293a1d1f1eb55095df.tar.xz
mullvadvpn-4d571edcf3d9f4a9af759c293a1d1f1eb55095df.zip
Suppress CVE-2024-7254
Diffstat (limited to 'android/test')
-rw-r--r--android/test/test-suppression.xml9
1 files changed, 9 insertions, 0 deletions
diff --git a/android/test/test-suppression.xml b/android/test/test-suppression.xml
index fac53625c9..cb6bd25a19 100644
--- a/android/test/test-suppression.xml
+++ b/android/test/test-suppression.xml
@@ -17,4 +17,13 @@
<cve>CVE-2023-33953</cve>
<cve>CVE-2023-44487</cve>
</suppress>
+ <suppress until="2024-12-01Z">
+ <notes><![CDATA[
+ Denial of service using protobuf.
+ Should not be applicable since client and server are always in sync and we are only
+ communicating locally over UDS.
+ ]]></notes>
+ <packageUrl regex="true">^pkg:maven/com\.google\.protobuf/protobuf-.*@.*$</packageUrl>
+ <cve>CVE-2024-7254</cve>
+ </suppress>
</suppressions>