diff options
| author | Albin <albin@mullvad.net> | 2022-10-07 09:19:30 +0200 |
|---|---|---|
| committer | Albin <albin@mullvad.net> | 2022-10-07 10:16:01 +0200 |
| commit | 193da8061cf5294347ce1af0f346d0bc344cc1e0 (patch) | |
| tree | 2dc196dc7a6dd286a3511f04dbc4262c04fcfc8b /android | |
| parent | e4b28fe806a2fe2e1418813e9c5f8c935e46cd83 (diff) | |
| download | mullvadvpn-193da8061cf5294347ce1af0f346d0bc344cc1e0.tar.xz mullvadvpn-193da8061cf5294347ce1af0f346d0bc344cc1e0.zip | |
Suppress CVE-2022-3171 from automatic audit checks
This suppression only affects the Android app.
The CVE will instead be tracked externally and will likely be mitigated
by either updating affected dependencies or by identifying that it
doesn't affect the app.
Diffstat (limited to 'android')
| -rw-r--r-- | android/config/dependency-check-suppression.xml | 7 | ||||
| -rw-r--r-- | android/e2e/e2e-suppression.xml | 7 |
2 files changed, 14 insertions, 0 deletions
diff --git a/android/config/dependency-check-suppression.xml b/android/config/dependency-check-suppression.xml index 2efc7cff12..c90c64c949 100644 --- a/android/config/dependency-check-suppression.xml +++ b/android/config/dependency-check-suppression.xml @@ -14,4 +14,11 @@ <packageUrl regex="true">^pkg:maven/com\.google\.protobuf/protobuf\-javalite@.*$</packageUrl> <cve>CVE-2021-22569</cve> </suppress> + <suppress> + <notes><![CDATA[ + This CVE is tracked externally and is therefore suppressed in the automatic audit checks. + ]]></notes> + <packageUrl regex="true">^pkg:maven/com\.google\.protobuf/protobuf\-javalite@.*$</packageUrl> + <cve>CVE-2022-3171</cve> + </suppress> </suppressions> diff --git a/android/e2e/e2e-suppression.xml b/android/e2e/e2e-suppression.xml index 42ee64cfcb..86e10bebb2 100644 --- a/android/e2e/e2e-suppression.xml +++ b/android/e2e/e2e-suppression.xml @@ -21,4 +21,11 @@ <packageUrl regex="true">^pkg:maven/com\.google\.protobuf/protobuf\-javalite@.*$</packageUrl> <cve>CVE-2021-22569</cve> </suppress> + <suppress> + <notes><![CDATA[ + This CVE is tracked externally and is therefore suppressed in the automatic audit checks. + ]]></notes> + <packageUrl regex="true">^pkg:maven/com\.google\.protobuf/protobuf\-javalite@.*$</packageUrl> + <cve>CVE-2022-3171</cve> + </suppress> </suppressions> |