[qt] Give exact fix for OSV-2020-902

[rlohning]

No description provided.

[rlohning]

I don't know when this issue was introduced. I can reproduce it with Qt 5.12.1 and it may be older.

Is there something like "-type: FIX" for the added link?

[oliverchang]

thanks!

[oliverchang]

Is there something like "-type: FIX" for the added link?

Yes! The list is here: https://github.com/ossf/osv-schema/blob/main/schema.md#references-field (I edited your PR).

[rlohning]

Hi Oliver,

thank you for your improvements.

I see that the list of affected versions was already updated. I'm surprised though that "v5.15.2" is not in the list. I could reproduce the issue with that version and it's branch does not contain the fix. Did anything confuse the bot?

Cheers,
Robert

[oliverchang]

Thanks for pointing this out Robert! I've opened google/osv.dev#203 to investigate this.

[oliverchang]

This should be fixed by google/osv.dev#204. It'll likely get merged and deployed next week, and I'll rerun the analysis on all qt entries.

[rlohning]

Thank you!

[rlohning]

In case this is related, please have a look at #9 (comment)

[oliverchang]

fb452b4 now includes 5.15.2