Cherry-pick patch mentioning this CVE. (From OE-Core rev: 120d8cc7b91654557a3101a5f8fda44fb703e5b2) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>