Hi It might be noted that the issues itself are mitigated with the fixes applied for CVE-2016-7966, and a user protected from this CVE by only viewing plain text mails. But the issues still presend. At least for CVE-2016-7968 a full fix would need to be building with Qt 5.7.0 AFAICT (please correct me if I'm wrong).
Regards, Salvatore