From 4cba8ad405b1728afda3873f99ac88711ab85644 Mon Sep 17 00:00:00 2001 From: Khem Raj Date: Sun, 28 Jul 2024 07:49:05 -0700 Subject: [PATCH] libyaml: Update status of CVE-2024-35328 This is open yet but seems to be disputed Signed-off-by: Khem Raj Signed-off-by: Richard Purdie --- meta/recipes-support/libyaml/libyaml_0.2.5.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-support/libyaml/libyaml_0.2.5.bb b/meta/recipes-support/libyaml/libyaml_0.2.5.bb index 4cb5717ece8..2d6f27af1fc 100644 --- a/meta/recipes-support/libyaml/libyaml_0.2.5.bb +++ b/meta/recipes-support/libyaml/libyaml_0.2.5.bb @@ -18,4 +18,6 @@ inherit autotools DISABLE_STATIC:class-nativesdk = "" DISABLE_STATIC:class-native = "" +CVE_STATUS[CVE-2024-35328] = "disputed: Upstream thinks there is no working code that is exploitable - https://github.com/yaml/libyaml/issues/302" + BBCLASSEXTEND = "native nativesdk" -- 2.47.3