We may ship db 5.3.28, but the CVE database knows this as oracle_berkeley_db
11.2.5.3.28.
(From OE-Core rev: f348cd641416d2750dfec8e19bd01e7ae9f809aa)
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>