The CVE applies to binutils 2.26 and not to gcc so ignore there. (From OE-Core rev: fea2726663a3db03170c49fceaffc632c509aeea) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>