- previously added CVE-2012-5645 patch is actually CVE-2012-6083 (renamed) - add real CVE-2012-5645 patch from upstream