This imports revision aa9b9dc9a94f224aab7c22e666f1ac946d9e7408 from https://git.yoctoproject.org/git/poky to avoid fetching it - and having to add the missing content validation to prevent supply-chain attacks. Reported-by: Raphael Lisicki <raphael.lisicki@siemens.com> Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>