libyaml: Change CVE status to wontfix

This has not yet been disputed officially (From OE-Core rev: 7ec7384837f3e3fb68b25a6108ed7ec0f261a4aa) Signed-off-by: Khem Raj <[email protected]> Signed-off-by: Richard Purdie <[email protected]>
yoctoproject · Aug 1, 2024 · 3ebb2ca · 3ebb2ca
1 parent fd8dc3a
commit 3ebb2ca
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/meta/recipes-support/libyaml/libyaml_0.2.5.bb b/meta/recipes-support/libyaml/libyaml_0.2.5.bb
@@ -18,6 +18,6 @@ inherit autotools
 DISABLE_STATIC:class-nativesdk = ""
 DISABLE_STATIC:class-native = ""
 
-CVE_STATUS[CVE-2024-35328] = "disputed: Upstream thinks there is no working code that is exploitable - https://github.com/yaml/libyaml/issues/302"
+CVE_STATUS[CVE-2024-35328] = "wontfix: Upstream thinks there is no working code that is exploitable - https://github.com/yaml/libyaml/issues/302"
 
 BBCLASSEXTEND = "native nativesdk"