[neon/qt6/qt6-svg/Neon/release] debian/patches: new cve patch

[Carlos De Maine]

Git commit a2c1bcb5a03244ac2ac38c342b71eea4afdeae6f by Carlos De Maine.
Committed on 24/10/2023 at 23:42.
Pushed by carlosdem into branch 'Neon/release'.

new cve patch

A  +14   -0    debian/patches/CVE-2023-45872-qtsvg-6.6.0.diff
M  +2    -1    debian/patches/series

https://invent.kde.org/neon/qt6/qt6-svg/-/commit/a2c1bcb5a03244ac2ac38c342b71eea4afdeae6f

diff --git a/debian/patches/CVE-2023-45872-qtsvg-6.6.0.diff b/debian/patches/CVE-2023-45872-qtsvg-6.6.0.diff
new file mode 100644
index 0000000..4dcb62e
--- /dev/null
+++ b/debian/patches/CVE-2023-45872-qtsvg-6.6.0.diff
@@ -0,0 +1,14 @@
+diff --git a/src/svg/qsvghandler.cpp b/src/svg/qsvghandler.cpp
+index 2649422..335500a 100644
+--- a/src/svg/qsvghandler.cpp
++++ b/src/svg/qsvghandler.cpp
+@@ -3606,6 +3606,8 @@ void QSvgHandler::init()
+
+ static bool detectCycles(const QSvgNode *node, QList<const QSvgUse *> active = {})
+ {
++    if (Q_UNLIKELY(!node))
++        return false;
+     switch (node->type()) {
+     case QSvgNode::DOC:
+     case QSvgNode::G:
+
diff --git a/debian/patches/series b/debian/patches/series
index 8b13789..5be2f7f 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1 +1,2 @@
-
+#CVE-2023-32573-qtsvg-6.5.diff # is in 6.5.1
+CVE-2023-45872-qtsvg-6.6.0.diff