Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-15-SP5:GA
patchinfo.25626
_patchinfo
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File _patchinfo of Package patchinfo.25626
<patchinfo incident="25626"> <issue tracker="bnc" id="1164550">VUL-0: CVE-2019-19203: oniguruma: heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c</issue> <issue tracker="bnc" id="1177179">VUL-1: CVE-2020-26159: oniguruma: Buffer overflow in concat_opt_exact_str could result in DoS</issue> <issue tracker="bnc" id="1164569">VUL-0: CVE-2019-19204: oniguruma: heap-based buffer over-read in function fetch_interval_quantifier in regparse.c</issue> <issue tracker="bnc" id="1157805">VUL-0: CVE-2019-19246: oniguruma: Heap-based buffer over-read in str_lower_case_match in regexec.c</issue> <issue tracker="bnc" id="1142847">VUL-0: CVE-2019-13224: oniguruma: use-after-free in onig_new_deluxe() in regext.c</issue> <issue tracker="bnc" id="1150130">VUL-1: CVE-2019-16163: oniguruma: stack Exhaustion in regcomp.c because of recursion in regparse.c.</issue> <issue tracker="cve" id="2019-16163"/> <issue tracker="cve" id="2019-19203"/> <issue tracker="cve" id="2019-13224"/> <issue tracker="cve" id="2019-19204"/> <issue tracker="cve" id="2020-26159"/> <issue tracker="cve" id="2019-19246"/> <packager>darix</packager> <rating>important</rating> <category>security</category> <summary>Security update for oniguruma</summary> <description>This update for oniguruma fixes the following issues: - CVE-2019-19246: Fixed an out of bounds access during regular expression matching (bsc#1157805). - CVE-2019-19204: Fixed an out of bounds access when compiling a crafted regular expression (bsc#1164569). - CVE-2019-19203: Fixed an out of bounds access when performing a string search (bsc#1164550). - CVE-2019-16163: Fixed an uncontrolled recursion issue when compiling a crafted regular expression, which could lead to denial of service (bsc#1150130). - CVE-2020-26159: Fixed an off-by-one buffer overflow (bsc#1177179). - CVE-2019-13224: Fixed a potential use-after-free when handling multiple different encodings (bsc#1142847). </description> </patchinfo>
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor