fix CVE-2020-14344 with squashed patch.
squashed patch include below patch,
1703b9f3431a566c9e002fcfcc49f3388b303c62
also include fix to issue introduced in above patch
(388b303c62aa35a245f1704211a023440ad2c488)
93fce3f4e7
(From OE-Core rev: b68ded7dee5e6e8b8f23840e3118edcdee7e5c7e)
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>