summaryrefslogtreecommitdiffhomepage
path: root/android
diff options
context:
space:
mode:
authorDavid Göransson <david.goransson@mullvad.net>2024-12-13 14:55:20 +0100
committerDavid Göransson <david.goransson@mullvad.net>2024-12-17 14:57:23 +0100
commite240b5ae6b29cf3f2ab71a44f0d52e1630f5454f (patch)
tree181dc6afa4c1f8adaa913683463f6afe034a20fc /android
parent960a420ab0cb10f711e1e6041562c2ad4265b79f (diff)
downloadmullvadvpn-e240b5ae6b29cf3f2ab71a44f0d52e1630f5454f.tar.xz
mullvadvpn-e240b5ae6b29cf3f2ab71a44f0d52e1630f5454f.zip
Extend expiry date
Diffstat (limited to 'android')
-rw-r--r--android/config/dependency-check-suppression-agp-fixes.xml6
-rw-r--r--android/config/dependency-check-suppression.xml8
2 files changed, 7 insertions, 7 deletions
diff --git a/android/config/dependency-check-suppression-agp-fixes.xml b/android/config/dependency-check-suppression-agp-fixes.xml
index 6537709f4a..16b4bba810 100644
--- a/android/config/dependency-check-suppression-agp-fixes.xml
+++ b/android/config/dependency-check-suppression-agp-fixes.xml
@@ -1,6 +1,6 @@
<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
- <suppress until="2024-12-01Z">
+ <suppress until="2025-03-01Z">
<notes><![CDATA[
This and all other supressions in this file are for dependencies only used for tests.
These should be excluded by the plugin but this behaviour is broken.
@@ -15,7 +15,7 @@
<cve>CVE-2022-41915</cve>
<cve>CVE-2024-47535</cve>
</suppress>
- <suppress until="2024-12-01Z">
+ <suppress until="2025-03-01Z">
<notes><![CDATA[
This and all other supressions in this file are for dependencies only used for tests.
These should be excluded by the plugin but this behaviour is broken.
@@ -27,7 +27,7 @@
<cve>CVE-2022-3510</cve>
<cve>CVE-2021-22569</cve>
</suppress>
- <suppress until="2024-12-01Z">
+ <suppress until="2025-03-01Z">
<notes><![CDATA[
This and all other supressions in this file are for dependencies only used for tests.
These should be excluded by the plugin but this behaviour is broken.
diff --git a/android/config/dependency-check-suppression.xml b/android/config/dependency-check-suppression.xml
index a7ef421fd2..7257124ef7 100644
--- a/android/config/dependency-check-suppression.xml
+++ b/android/config/dependency-check-suppression.xml
@@ -8,7 +8,7 @@
<packageUrl regex="true">^pkg:maven/org\.jetbrains\.kotlin/kotlin\-stdlib.*@.*$</packageUrl>
<cve>CVE-2022-24329</cve>
</suppress>
- <suppress until="2024-12-01Z">
+ <suppress until="2025-03-01Z">
<notes><![CDATA[
This CVE only affect programs using loadXML and is derived from using ksp.
We do not use the loadXML, ksp is used to generate navigation paths in our code
@@ -17,14 +17,14 @@
<packageUrl regex="true">^pkg:maven/com\.google\.devtools\.ksp/symbol\-processing.*@.*$</packageUrl>
<cve>CVE-2018-1000840</cve>
</suppress>
- <suppress until="2024-12-01Z">
+ <suppress until="2025-03-01Z">
<notes><![CDATA[
False-positive only affecting javascript gRPC packages.
]]></notes>
<packageUrl regex="true">^pkg:maven/io\.grpc/protoc\-gen\-grpc\-kotlin@.*$</packageUrl>
<cve>CVE-2020-7768</cve>
</suppress>
- <suppress until="2024-12-01Z">
+ <suppress until="2025-03-01Z">
<notes><![CDATA[
No impact on this app since it uses UDS rather than HTTP2.
]]></notes>
@@ -40,7 +40,7 @@
<packageUrl regex="true">^pkg:maven/commons\-validator/commons\-validator@.*$</packageUrl>
<cve>CVE-2021-3765</cve>
</suppress>
- <suppress until="2024-12-01Z">
+ <suppress until="2025-03-01Z">
<notes><![CDATA[
Denial of service using protobuf.
Should not be applicable since client and server are always in sync and we are only