Pick commit referencing this CVE from 2.13 branch. (From OE-Core rev: 1dab0ba31fd09911d4fa707c1318bb0e83f46cdd) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>