Pick patch for this CVE merged into 3.10 branch.
(From OE-Core rev: 8888cd14eb102574d530b6c683ce5beaad1aaa39)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>