Skip to content

Commit

Permalink
Extend epiry date
Browse files Browse the repository at this point in the history
  • Loading branch information
Rawa committed Dec 13, 2024
1 parent 48dc051 commit 9618ec9
Show file tree
Hide file tree
Showing 2 changed files with 7 additions and 7 deletions.
6 changes: 3 additions & 3 deletions android/config/dependency-check-suppression-agp-fixes.xml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
<?xml version="1.0" encoding="UTF-8"?>
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<suppress until="2024-12-01Z">
<suppress until="2025-03-01Z">
<notes><![CDATA[
This and all other supressions in this file are for dependencies only used for tests.
These should be excluded by the plugin but this behaviour is broken.
Expand All @@ -15,7 +15,7 @@
<cve>CVE-2022-41915</cve>
<cve>CVE-2024-47535</cve>
</suppress>
<suppress until="2024-12-01Z">
<suppress until="2025-03-01Z">
<notes><![CDATA[
This and all other supressions in this file are for dependencies only used for tests.
These should be excluded by the plugin but this behaviour is broken.
Expand All @@ -27,7 +27,7 @@
<cve>CVE-2022-3510</cve>
<cve>CVE-2021-22569</cve>
</suppress>
<suppress until="2024-12-01Z">
<suppress until="2025-03-01Z">
<notes><![CDATA[
This and all other supressions in this file are for dependencies only used for tests.
These should be excluded by the plugin but this behaviour is broken.
Expand Down
8 changes: 4 additions & 4 deletions android/config/dependency-check-suppression.xml
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@
<packageUrl regex="true">^pkg:maven/org\.jetbrains\.kotlin/kotlin\-stdlib.*@.*$</packageUrl>
<cve>CVE-2022-24329</cve>
</suppress>
<suppress until="2024-12-01Z">
<suppress until="2025-03-01Z">
<notes><![CDATA[
This CVE only affect programs using loadXML and is derived from using ksp.
We do not use the loadXML, ksp is used to generate navigation paths in our code
Expand All @@ -17,14 +17,14 @@
<packageUrl regex="true">^pkg:maven/com\.google\.devtools\.ksp/symbol\-processing.*@.*$</packageUrl>
<cve>CVE-2018-1000840</cve>
</suppress>
<suppress until="2024-12-01Z">
<suppress until="2025-03-01Z">
<notes><![CDATA[
False-positive only affecting javascript gRPC packages.
]]></notes>
<packageUrl regex="true">^pkg:maven/io\.grpc/protoc\-gen\-grpc\-kotlin@.*$</packageUrl>
<cve>CVE-2020-7768</cve>
</suppress>
<suppress until="2024-12-01Z">
<suppress until="2025-03-01Z">
<notes><![CDATA[
No impact on this app since it uses UDS rather than HTTP2.
]]></notes>
Expand All @@ -40,7 +40,7 @@
<packageUrl regex="true">^pkg:maven/commons\-validator/commons\-validator@.*$</packageUrl>
<cve>CVE-2021-3765</cve>
</suppress>
<suppress until="2024-12-01Z">
<suppress until="2025-03-01Z">
<notes><![CDATA[
Denial of service using protobuf.
Should not be applicable since client and server are always in sync and we are only
Expand Down

0 comments on commit 9618ec9

Please sign in to comment.