Cherry-pick patch mentioning these CVEs. (From OE-Core rev: eb9811ef2a38f1dcd4074eef6f809fd63e98454f) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>