alex/esp-idf
alex/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2024-10-05 20:47:46 -04:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

fix(newlib): sbom: add CVE-2024-30949 to cve-exclude-list

Browse Source
This commit is contained in:
Alexey Lapshin 2024-09-06 18:27:09 +07:00
parent 50abf54d0f
commit 13ec7d2b24
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
components/newlib/sbom.yml
View File

@ -4,3 +4,6 @@ cpe: cpe:2.3:a:newlib_project:newlib:{}:*:*:*:*:*:*:*
supplier: 'Organization: Espressif Systems (Shanghai) CO LTD'
originator: 'Organization: Red Hat Incorporated'
description: An open-source C standard library implementation with additional features and patches from Espressif.
cve-exclude-list:
- cve: CVE-2024-30949
reason: May affect RISCV binaries that are linked with libgloss. IDF does not link against this library.