Cherry-pick patch mentioning this CVE. (From OE-Core rev: f3a14813ed012904e64fd9897ea4ddaf622059dd) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>