Cherry-pick patch mentioning this CVE. (From OE-Core rev: f24f2dc0b7504508357cbe5d5f7a577639a6548e) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>