[Buildroot] [PATCH v1 2/2] package/qt5base: add patches to fix CVE-2020-0569 and CVE-2020-0570 for latest

[Peter Seiderer]

Hello Peter,

On Sat, 01 Feb 2020 23:44:26 +0100, Peter Korsgaard <peter at korsgaard.com> wrote:

> >>>>> "Peter" == Peter Seiderer <ps.report at gmx.net> writes:
>
>  > Add upstream patches to fix CVE-2020-0569 and CVE-2020-0570 for
>  > latest qt version (for details see [1]).
>
>  > [1] https://www.openwall.com/lists/oss-security/2020/01/30/1
>
>  > Signed-off-by: Peter Seiderer <ps.report at gmx.net>
>
> Committed after extending the commit message a bit, thanks.
>
> I see from the advisory that there is a 5.12.7 version with this fix
> included. Any specific reason why we don't bump the version instead?

Because the advisory states 'fixed 5.12.7 (future)'...

>
> https://download.qt.io/archive/qt/5.12/5.12.7/
>

...and the version is only available since two days (and the sha256 sums only since
yesterday)..., but version bump  patch will follow soon ;-)

Regards,
Peter