diff options
| author | Albin <albin@mullvad.net> | 2023-07-27 11:26:06 +0200 |
|---|---|---|
| committer | Albin <albin@mullvad.net> | 2023-07-27 11:53:36 +0200 |
| commit | ea51297f2a3bbac44351147df78ae4f3ff2bc6e8 (patch) | |
| tree | 72328e2b0966106e46583ff2b2a539f3b8cf27db /android | |
| parent | 8bb24a6f63a906be290920c1bcf4169ee8b05f06 (diff) | |
| download | mullvadvpn-ea51297f2a3bbac44351147df78ae4f3ff2bc6e8.tar.xz mullvadvpn-ea51297f2a3bbac44351147df78ae4f3ff2bc6e8.zip | |
Suppress CVE-2023-3635
Diffstat (limited to 'android')
| -rw-r--r-- | android/config/dependency-check-suppression.xml | 10 | ||||
| -rw-r--r-- | android/test/test-suppression.xml | 10 |
2 files changed, 20 insertions, 0 deletions
diff --git a/android/config/dependency-check-suppression.xml b/android/config/dependency-check-suppression.xml index 9e7d9e87a2..adb49410dc 100644 --- a/android/config/dependency-check-suppression.xml +++ b/android/config/dependency-check-suppression.xml @@ -41,4 +41,14 @@ <packageUrl regex="true">^pkg:maven/org\.jetbrains\.kotlin/kotlin\-stdlib.*@.*$</packageUrl> <cve>CVE-2022-24329</cve> </suppress> + <suppress until="2023-12-01Z"> + <notes><![CDATA[ + This CVE only affect the leakCanary build type which is limited to memory leak testing etc. + This will most likely be solved by bumping to a future version of the leakcanary dependency + where a fixed version of okio is used. + https://nvd.nist.gov/vuln/detail/CVE-2023-3635 + ]]></notes> + <packageUrl regex="true">^pkg:maven/com\.squareup\.okio/okio@.*$</packageUrl> + <cve>CVE-2023-3635</cve> + </suppress> </suppressions> diff --git a/android/test/test-suppression.xml b/android/test/test-suppression.xml index 1a3614b6a9..526f89a2c5 100644 --- a/android/test/test-suppression.xml +++ b/android/test/test-suppression.xml @@ -92,4 +92,14 @@ <packageUrl regex="true">^pkg:maven/com\.android\.tools/common@.*$</packageUrl> <cve>CVE-2021-4277</cve> </suppress> + <suppress until="2023-12-01Z"> + <notes><![CDATA[ + This CVE only affect the leakCanary build type which is limited to memory leak testing etc. + This will most likely be solved by bumping to a future version of the leakcanary dependency + where a fixed version of okio is used. + https://nvd.nist.gov/vuln/detail/CVE-2023-3635 + ]]></notes> + <packageUrl regex="true">^pkg:maven/com\.squareup\.okio/okio.*@.*$</packageUrl> + <cve>CVE-2023-3635</cve> + </suppress> </suppressions> |