[OpenIndiana-discuss] p7zip

[cpforum]

Hi,


It seems that CVE-2016-9296 (2016111) affect p7zip Hipster release (15.14.1-2016.0.0.3)

pkg info compress/p7zip 
Nom: compress/p7zip
Récapitulatif: The p7zip compression and archiving utility
Description: P7zip is a unix port of the 7-Zip utility. It has support for
numerous compression algorithms, including LZMA and LZMA2, as
well as for various archive and compression file formats,
including 7z, xz, bzip2, gzip, tar, zip (read-write) and cab,
cpio, deb, lzh, rar, and rpm (read-only).
Category: System/Core
State: Installé
Editeur: openindiana.org
Version: 15.14.1
Branch: 2016.0.0.3
Packaging Date: 29 juillet 2016 22:51:57
Taille: 13.39 Mo
FMRI: pkg://openindiana.org/compress/p7zip@15.14.1-2016.0.0.3:20160729T225157Z
Project URL: http://p7zip.sourceforge.net/
Source URL: http://downloads.sourceforge.net/project/p7zip/p7zip/15.14.1/p7zip_15.14.1_src_all.tar.bz2


Last release is 16.04

https://bugs.launchpad.net/bugs/cve/2016-9296

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9296