summaryrefslogtreecommitdiffhomepage
path: root/android/test
diff options
context:
space:
mode:
authorAlbin <albin@mullvad.net>2023-07-27 11:26:06 +0200
committerAlbin <albin@mullvad.net>2023-07-27 11:53:36 +0200
commitea51297f2a3bbac44351147df78ae4f3ff2bc6e8 (patch)
tree72328e2b0966106e46583ff2b2a539f3b8cf27db /android/test
parent8bb24a6f63a906be290920c1bcf4169ee8b05f06 (diff)
downloadmullvadvpn-ea51297f2a3bbac44351147df78ae4f3ff2bc6e8.tar.xz
mullvadvpn-ea51297f2a3bbac44351147df78ae4f3ff2bc6e8.zip
Suppress CVE-2023-3635
Diffstat (limited to 'android/test')
-rw-r--r--android/test/test-suppression.xml10
1 files changed, 10 insertions, 0 deletions
diff --git a/android/test/test-suppression.xml b/android/test/test-suppression.xml
index 1a3614b6a9..526f89a2c5 100644
--- a/android/test/test-suppression.xml
+++ b/android/test/test-suppression.xml
@@ -92,4 +92,14 @@
<packageUrl regex="true">^pkg:maven/com\.android\.tools/common@.*$</packageUrl>
<cve>CVE-2021-4277</cve>
</suppress>
+ <suppress until="2023-12-01Z">
+ <notes><![CDATA[
+ This CVE only affect the leakCanary build type which is limited to memory leak testing etc.
+ This will most likely be solved by bumping to a future version of the leakcanary dependency
+ where a fixed version of okio is used.
+ https://nvd.nist.gov/vuln/detail/CVE-2023-3635
+ ]]></notes>
+ <packageUrl regex="true">^pkg:maven/com\.squareup\.okio/okio.*@.*$</packageUrl>
+ <cve>CVE-2023-3635</cve>
+ </suppress>
</suppressions>