Add "CVE:" tag to current patches in OE-core

The currnet patches in OE-core doesn't have the "CVE:"
tag, now part of the policy of the patches.

This is patch add this tag to several patches. There might
be patches that I miss; the tag can be added in the future.

(From OE-Core rev: 065ebeb3e15311d0d45385e15bf557b1c95b1669)

Signed-off-by: Mariano Lopez <mariano.lopez@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

meta/recipes-devtools/rpm/rpm/rpm-CVE-2013-6435.patch

@@ -4,6 +4,7 @@ Date: Wed, 10 Jun 2015 14:36:56 +0000
 Subject: [PATCH 2/2] rpm: CVE-2013-6435
 
 Upstream-Status: Backport
+CVE: CVE-2013-6435
 
 Reference:
 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-6435

meta/recipes-devtools/rpm/rpm/rpm-CVE-2014-8118.patch

@@ -4,6 +4,7 @@ Date: Wed, 10 Jun 2015 12:56:55 +0000
 Subject: [PATCH 1/2] rpm: CVE-2014-8118
 
 Upstream-Status: Backport
+CVE: CVE-2014-8118
 
 Reference:
 https://bugzilla.redhat.com/show_bug.cgi?id=1168715