Pick patch mentioning this CVE number.
(From OE-Core rev: 8fa0c278c269ed1ef0225cf22a86d0b36632058e)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>