From 8580f9f622b370094af5ce21fe4caf25a3687550 Mon Sep 17 00:00:00 2001 From: Nachiket Kukade Date: Fri, 8 Nov 2024 17:54:45 +0530 Subject: [PATCH] fix(wpa_supplicant): Add an exception in wpa_supplicant sbom.yml --- components/wpa_supplicant/sbom.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/components/wpa_supplicant/sbom.yml b/components/wpa_supplicant/sbom.yml index c283feb632..082c690765 100644 --- a/components/wpa_supplicant/sbom.yml +++ b/components/wpa_supplicant/sbom.yml @@ -4,3 +4,6 @@ cpe: cpe:2.3:a:w1.fi:wpa_supplicant:{}:*:*:*:*:*:*:* supplier: 'Organization: Espressif Systems (Shanghai) CO LTD' originator: 'Person: Jouni Malinen' description: Espressif fork of wpa_supplicant - an open-source WPA/WPA2/WPA3/IEEE 802.1X Supplicant. +cve-exclude-list: + - cve: CVE-2023-52160 + reason: The relevant fix has been patched with https://github.com/espressif/esp-idf/commit/59a62f2af65945f92d475089f9ce66fce56cc737