CVE-2019-7524 backport patch for 2.2.33.2