Moderate: oniguruma security update (Oracle Linux 8)

Summary

Fixed packages 2

Vulnerabilities 5

• Unscored —
  CVE-2019-13224

  A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information …

  php5 php7 libonig libonig Debian Ubuntu Alpine
  Jul 10, 2019
• Unscored —
  CVE-2019-16163

  Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.

  libonig libonig Debian Ubuntu
  Sep 9, 2019
• Unscored —
  CVE-2019-19012 Public exploit EPSS 11%

  An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-b…

  libonig libonig Debian Ubuntu
  Nov 16, 2019
• Unscored —
  CVE-2019-19203 Public exploit

  An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UCh…

  libonig libonig Debian Ubuntu
  Nov 21, 2019
• Unscored —
  CVE-2019-19204 Public exploit

  An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as…

  libonig libonig Debian Ubuntu
  Nov 21, 2019