qt: version bump, fix CVE