change(mbedtls): adds CVE-2025-66442 to exclude list.

The CVE is applicable with Clang using LLVM's select-optimize feature. ESP-IDF uses GCC as default compiler and sets -Os as the default optimisation flag
This commit is contained in:
Ashish Sharma
2026-04-09 17:16:42 +08:00
parent 582ff48203
commit e6be698a7a
+2
View File
@@ -15,3 +15,5 @@ cve-exclude-list:
reason: Fixed in 3.6.4
- cve: CVE-2025-27810
reason: Fixed in 3.6.3
- cve: CVE-2025-66442
reason: Applicable only with Clang with select-optimize feature. ESP-IDF uses gcc as the default compiler and uses -Os as the default optimisation flag