Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-02 03:00:34 +03:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'bugfix/openthread_exclude_cve_v6.0' into 'release/v6.0'

Browse Source 
fix(openthread): exclude CVE-2026-8369 from the list (v6.0)

See merge request espressif/esp-idf!48724
This commit is contained in:
Mahavir Jain
2026-06-29 11:20:21 +05:30
parent c20b090b21 bb93192c50
commit ff155dbaf8
2 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
components/openthread/sbom.yml
+1 -1
View File
@@ -1,5 +1,5 @@
name: 'openthread component' name: 'openthread component'
version: '2023-07-06' version: '2025-06-12'
supplier: 'Organization: Espressif Systems (Shanghai) CO LTD' supplier: 'Organization: Espressif Systems (Shanghai) CO LTD'
description: Espressif fork of OpenThread project, used to maintain ESP-specific patches and release branches description: Espressif fork of OpenThread project, used to maintain ESP-specific patches and release branches
manifests: manifests:
components/openthread/sbom_openthread.yml
+4 -1
View File
@@ -1,8 +1,11 @@
name: 'openthread' name: 'openthread'
version: '2023-07-06' version: '2025-06-12'
cpe: cpe:2.3:o:google:openthread:{}:*:*:*:*:*:*:* cpe: cpe:2.3:o:google:openthread:{}:*:*:*:*:*:*:*
supplier: 'Organization: Espressif Systems (Shanghai) CO LTD' supplier: 'Organization: Espressif Systems (Shanghai) CO LTD'
originator: 'Organization: Google LLC' originator: 'Organization: Google LLC'
description: OpenThread released by Google is an open-source implementation of the Thread networking description: OpenThread released by Google is an open-source implementation of the Thread networking
url: https://github.com/espressif/openthread url: https://github.com/espressif/openthread
hash: a98813b30ae58f9a95ece680b9cc46c3874de6ea hash: a98813b30ae58f9a95ece680b9cc46c3874de6ea
cve-exclude-list:
- cve: CVE-2026-8369
reason: We use Espressif’s NAT64 implementation and hence this CVE from the upstream NAT64 implementation is not applicable.