p7zip: apply patches for CVE-2016-9296 and CVE-2017-17969

Closes #23801.

Signed-off-by: ilovezfs <ilovezfs@icloud.com>

Formula/p7zip.rb

@@ -3,6 +3,7 @@ class P7zip < Formula
   homepage "https://p7zip.sourceforge.io/"
   url "https://downloads.sourceforge.net/project/p7zip/p7zip/16.02/p7zip_16.02_src_all.tar.bz2"
   sha256 "5eb20ac0e2944f6cb9c2d51dd6c4518941c185347d4089ea89087ffdd6e2341f"
+  revision 1
 
   bottle do
     cellar :any_skip_relocation
@@ -13,6 +14,14 @@ class P7zip < Formula
     sha256 "78981de13a763ab595e073360e2848ca0ad65d9a13b7f7728e0c255945cdd00e" => :mavericks
   end
 
+  patch do
+    url "https://mirrors.ocf.berkeley.edu/debian/pool/main/p/p7zip/p7zip_16.02+dfsg-6.debian.tar.xz"
+    mirror "https://mirrorservice.org/sites/ftp.debian.org/debian/pool/main/p/p7zip/p7zip_16.02+dfsg-6.debian.tar.xz"
+    sha256 "fab0be1764efdbde1804072f1daa833de4e11ea65f718ad141a592404162643c"
+    apply "patches/12-CVE-2016-9296.patch",
+          "patches/13-CVE-2017-17969.patch"
+  end
+
   def install
     mv "makefile.macosx_llvm_64bits", "makefile.machine"
     system "make", "all3",