Cherry-pick patch mentioning these CVEs. (From OE-Core rev: d96bf8ec82ed07c006167e15f7aa0d5e81440977) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>