openSUSE has issued an advisory on April 3: https://lists.opensuse.org/opensuse-updates/2017-04/msg00004.html
fixed in cauldron
Resolution: (none) => FIXEDStatus: NEW => RESOLVED
Actually not fixed, as the build failed.
Resolution: FIXED => (none)Status: RESOLVED => REOPENED
really fixed now
Resolution: (none) => FIXEDStatus: REOPENED => RESOLVED
CVE: (none) => CVE-2016-9579