Re: [OpenIndiana-discuss] p7zip

2016-12-09 Thread Alan Coopersmith
On 12/8/2016 10:07 PM, Jim Klimov wrote: > On another hand, is there a particular benefit of patching older versions in > userland as cve fixes come out, rather than taking the newest release > (assumed to include all bugfixes known to authors)? That is a very risky assumption to make - many

Re: [OpenIndiana-discuss] p7zip

2016-12-09 Thread Peter Tribble
On Thu, Dec 8, 2016 at 7:05 PM, Tim Mooney wrote: > In regard to: Re: [OpenIndiana-discuss] p7zip, Alexander Pyhalov said > (at...: > > >> Hi. Yes, we missed this fix. I've just committed it. >> Unfortunately, pkg info is quite useless in determining, which security >> fixes