stable-queue: list of commits needed for CVE fixes. Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com>