Merge branch 'fix/add_sbom_exception_v5.4' into 'release/v5.4'

Add an exception in wpa_supplicant sbom.yml (Backport v5.4) See merge request espressif/esp-idf!35061
espressif · Nov 22, 2024 · 31ef58d · 31ef58d
2 parents 569f6c0 + 8580f9f
commit 31ef58d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/components/wpa_supplicant/sbom.yml b/components/wpa_supplicant/sbom.yml
@@ -4,3 +4,6 @@ cpe: cpe:2.3:a:w1.fi:wpa_supplicant:{}:*:*:*:*:*:*:*
 supplier: 'Organization: Espressif Systems (Shanghai) CO LTD'
 originator: 'Person: Jouni Malinen'
 description: Espressif fork of wpa_supplicant - an open-source WPA/WPA2/WPA3/IEEE 802.1X Supplicant.
+cve-exclude-list:
+  - cve: CVE-2023-52160
+    reason: The relevant fix has been patched with https://github.com/espressif/esp-idf/commit/59a62f2af65945f92d475089f9ce66fce56cc737