diff options
| author | David Göransson <david.goransson@mullvad.net> | 2024-12-17 14:57:49 +0100 |
|---|---|---|
| committer | David Göransson <david.goransson@mullvad.net> | 2024-12-17 14:57:49 +0100 |
| commit | c5f434719dacffe76a9d2d25498bc8bc0e1860b8 (patch) | |
| tree | 50ac78298ef1ee7453fc2f0435b92194b7b5d2ea /android | |
| parent | 489a788d81e78d123b73f06dbf7ce663f48c1b33 (diff) | |
| parent | 8e9061b034396ed1fef43cf6941668d908abbed0 (diff) | |
| download | mullvadvpn-c5f434719dacffe76a9d2d25498bc8bc0e1860b8.tar.xz mullvadvpn-c5f434719dacffe76a9d2d25498bc8bc0e1860b8.zip | |
Merge branch 'bump-dependencies-3'
Diffstat (limited to 'android')
52 files changed, 307 insertions, 901 deletions
diff --git a/android/config/dependency-check-suppression-agp-fixes.xml b/android/config/dependency-check-suppression-agp-fixes.xml index 6537709f4a..16b4bba810 100644 --- a/android/config/dependency-check-suppression-agp-fixes.xml +++ b/android/config/dependency-check-suppression-agp-fixes.xml @@ -1,6 +1,6 @@ <?xml version="1.0" encoding="UTF-8"?> <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd"> - <suppress until="2024-12-01Z"> + <suppress until="2025-03-01Z"> <notes><![CDATA[ This and all other supressions in this file are for dependencies only used for tests. These should be excluded by the plugin but this behaviour is broken. @@ -15,7 +15,7 @@ <cve>CVE-2022-41915</cve> <cve>CVE-2024-47535</cve> </suppress> - <suppress until="2024-12-01Z"> + <suppress until="2025-03-01Z"> <notes><![CDATA[ This and all other supressions in this file are for dependencies only used for tests. These should be excluded by the plugin but this behaviour is broken. @@ -27,7 +27,7 @@ <cve>CVE-2022-3510</cve> <cve>CVE-2021-22569</cve> </suppress> - <suppress until="2024-12-01Z"> + <suppress until="2025-03-01Z"> <notes><![CDATA[ This and all other supressions in this file are for dependencies only used for tests. These should be excluded by the plugin but this behaviour is broken. diff --git a/android/config/dependency-check-suppression.xml b/android/config/dependency-check-suppression.xml index a7ef421fd2..7257124ef7 100644 --- a/android/config/dependency-check-suppression.xml +++ b/android/config/dependency-check-suppression.xml @@ -8,7 +8,7 @@ <packageUrl regex="true">^pkg:maven/org\.jetbrains\.kotlin/kotlin\-stdlib.*@.*$</packageUrl> <cve>CVE-2022-24329</cve> </suppress> - <suppress until="2024-12-01Z"> + <suppress until="2025-03-01Z"> <notes><![CDATA[ This CVE only affect programs using loadXML and is derived from using ksp. We do not use the loadXML, ksp is used to generate navigation paths in our code @@ -17,14 +17,14 @@ <packageUrl regex="true">^pkg:maven/com\.google\.devtools\.ksp/symbol\-processing.*@.*$</packageUrl> <cve>CVE-2018-1000840</cve> </suppress> - <suppress until="2024-12-01Z"> + <suppress until="2025-03-01Z"> <notes><![CDATA[ False-positive only affecting javascript gRPC packages. ]]></notes> <packageUrl regex="true">^pkg:maven/io\.grpc/protoc\-gen\-grpc\-kotlin@.*$</packageUrl> <cve>CVE-2020-7768</cve> </suppress> - <suppress until="2024-12-01Z"> + <suppress until="2025-03-01Z"> <notes><![CDATA[ No impact on this app since it uses UDS rather than HTTP2. ]]></notes> @@ -40,7 +40,7 @@ <packageUrl regex="true">^pkg:maven/commons\-validator/commons\-validator@.*$</packageUrl> <cve>CVE-2021-3765</cve> </suppress> - <suppress until="2024-12-01Z"> + <suppress until="2025-03-01Z"> <notes><