SUSE-SU-2016:1593-1

Details

This update for p7zip fixes the following issues:

add p7zip-9.20.1-CVE-2016-2335.patch to fix 7zip UDF CInArchive::ReadFileItem code execution vulnerability [bsc#979823], [CVE-2016-2335]

Affected Packages

p7zip

SUSE Linux Enterprise Desktop 12SUSE Linux Enterprise Desktop 12 SP1SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP1SUSE Linux Enterprise Server for SAP Applications 12

Fixed in:

9.20.1-6.1

References

REPORT

https://bugzilla.suse.com/979823

WEB

https://www.suse.com/security/cve/CVE-2016-2335

ADVISORY

https://www.suse.com/support/update/announcement/2016/suse-su-20161593-1/