Added a patch to fix
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-4091
[YOCTO #984] is partially fixed by this commit.
(From OE-Core rev: 3670f110aacebdde118b79d31aa15156330418c6)
Signed-off-by: Dexuan Cui <dexuan.cui@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>