SUSE-SU-2016:1593-1

Details

Description of the patch:

This update for p7zip fixes the following issues:

add p7zip-9.20.1-CVE-2016-2335.patch to fix 7zip UDF CInArchive::ReadFileItem code execution vulnerability [bsc#979823], [CVE-2016-2335]

Affected Packages

p7zip

SUSE Linux Enterprise Desktop 12SUSE Linux Enterprise Desktop 12 SP1SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP1SUSE Linux Enterprise Server for SAP Applications 12

Fixed in:

9.20.1-6.1

References

ADVISORY

https://bugzilla.suse.com/979823

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2016-June/002118.html

ADVISORY

https://www.suse.com/security/cve/CVE-2016-2335/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2016/suse-su-20161593-1/