Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Suppress Joda-Time CVE-2024-23080 #6118

Merged
merged 1 commit into from
Apr 15, 2024
Merged

Conversation

albin-mullvad
Copy link
Collaborator

@albin-mullvad albin-mullvad commented Apr 12, 2024

Suppressing since the affected function isn't used in this project. No upstream fixes are available at the time of adding this suppression.

https://nvd.nist.gov/vuln/detail/CVE-2024-23080


This change is Reviewable

@albin-mullvad albin-mullvad added the Android Issues related to Android label Apr 12, 2024
@albin-mullvad albin-mullvad self-assigned this Apr 12, 2024
@albin-mullvad albin-mullvad requested review from Rawa and Pururun April 12, 2024 15:24
Copy link
Contributor

@Rawa Rawa left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed 2 of 2 files at r1, all commit messages.
Reviewable status: :shipit: complete! all files reviewed, all discussions resolved

Copy link
Contributor

@Rawa Rawa left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:lgtm:

Reviewable status: :shipit: complete! all files reviewed, all discussions resolved

Copy link
Contributor

@Pururun Pururun left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:lgtm:

Reviewed all commit messages.
Reviewable status: :shipit: complete! all files reviewed, all discussions resolved

@albin-mullvad albin-mullvad force-pushed the suppress-CVE-2024-23080 branch from a740b9c to ef57b79 Compare April 15, 2024 08:33
@albin-mullvad albin-mullvad merged commit fda323c into main Apr 15, 2024
24 checks passed
@albin-mullvad albin-mullvad deleted the suppress-CVE-2024-23080 branch April 15, 2024 08:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Android Issues related to Android
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants