Red Hat Security Advisory: oniguruma security update

Fixed packages 6

Vulnerabilities 5

• Unscored —
  CVE-2019-13224

  A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information …

  php5 php7 libonig libonig Debian Ubuntu Alpine
  Jul 10, 2019
• Unscored —
  CVE-2019-16163

  Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.

  libonig libonig Debian Ubuntu
  Sep 9, 2019
• Unscored —
  CVE-2019-19012 Public exploit EPSS 11%

  An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-b…

  libonig libonig Debian Ubuntu
  Nov 16, 2019
• Unscored —
  CVE-2019-19203 Public exploit

  An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UCh…

  libonig libonig Debian Ubuntu
  Nov 21, 2019
• Unscored —
  CVE-2019-19204 Public exploit

  An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as…

  libonig libonig Debian Ubuntu
  Nov 21, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1728970
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1768997
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1802051
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1802061
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1802068
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0409.json
• report
  https://access.redhat.com/security/cve/CVE-2019-13224
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-13224
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-13224
• report
  https://access.redhat.com/security/cve/CVE-2019-16163
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-16163
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-16163
• report
  https://access.redhat.com/security/cve/CVE-2019-19012
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-19012
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-19012
• report
  https://access.redhat.com/security/cve/CVE-2019-19203
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-19203
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-19203
• report
  https://access.redhat.com/security/cve/CVE-2019-19204
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-19204
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-19204