gpp_maybe Security update for p7zip

SUSE-SLE-SERVER-12-SP2-2018-319

This update for p7zip fixes the following issues: Security issues fixed: - CVE-2016-1372: Fixed multiple vulnerabilities when processing crafted 7z files (bsc#984650) - CVE-2017-17969: Fixed a heap-based buffer overflow in a shrink decoder (bsc#1077725) - CVE-2018-5996: Fixed memory corruption in RAR decompression. The complete RAR decoder was removed as it also has license issues (bsc#1077724 bsc#1077978)

• Release Date
  Feb 16 2018
• References
  Bugzilla: 1077978, 984650, 1077725, 1077724
  CVEs: CVE-2017-17969, CVE-2016-1372, CVE-2018-5996
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  p7zip
  7-zip file compression program

  9.20.1-7.3.1 lock rpm lock src

SUSE Linux Enterprise Server 12.2 s390x

• Packages
  p7zip
  7-zip file compression program

  9.20.1-7.3.1 lock rpm lock src

SUSE Linux Enterprise Server 12.2 aarch64

• Packages
  p7zip
  7-zip file compression program

  9.20.1-7.3.1 lock rpm lock src

SUSE Linux Enterprise Server 12.2 x86_64

• Packages
  p7zip
  7-zip file compression program

  9.20.1-7.3.1 lock rpm lock src