Security update for oniguruma SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:3327-1 Final 1 1 2022-09-21T10:47:37Z current 2022-09-21T10:47:37Z 2022-09-21T10:47:37Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for oniguruma This update for oniguruma fixes the following issues: - CVE-2019-19246: Fixed an out of bounds access during regular expression matching (bsc#1157805). - CVE-2019-19204: Fixed an out of bounds access when compiling a crafted regular expression (bsc#1164569). - CVE-2019-19203: Fixed an out of bounds access when performing a string search (bsc#1164550). - CVE-2019-16163: Fixed an uncontrolled recursion issue when compiling a crafted regular expression, which could lead to denial of service (bsc#1150130). - CVE-2020-26159: Fixed an off-by-one buffer overflow (bsc#1177179). - CVE-2019-13224: Fixed a potential use-after-free when handling multiple different encodings (bsc#1142847). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/php-apache:8-2022-3327,Container bci/php-fpm:8-2022-3327,Container bci/php:8-2022-3327,Container suse/sle-micro-rancher/5.2:latest-2022-3327,Container suse/sle-micro-rancher/5.3:latest-2022-3327,Container suse/sle-micro-rancher/5.4:latest-2022-3327,Image SLES15-SP3-CHOST-BYOS-Aliyun-2022-3327,Image SLES15-SP3-CHOST-BYOS-Azure-2022-3327,Image SLES15-SP3-CHOST-BYOS-EC2-2022-3327,Image SLES15-SP3-CHOST-BYOS-GCE-2022-3327,Image SLES15-SP3-CHOST-BYOS-SAP-CCloud-2022-3327,Image SLES15-SP4-CHOST-BYOS-2022-3327,Image SLES15-SP4-CHOST-BYOS-Aliyun-2022-3327,Image SLES15-SP4-CHOST-BYOS-Azure-2022-3327,Image SLES15-SP4-CHOST-BYOS-EC2-2022-3327,Image SLES15-SP4-CHOST-BYOS-GCE-2022-3327,Image SLES15-SP4-CHOST-BYOS-SAP-CCloud-2022-3327,Image SLES15-SP5-BYOS-GCE-2022-3327,Image SLES15-SP5-CHOST-BYOS-Aliyun-2022-3327,Image SLES15-SP5-CHOST-BYOS-Azure-2022-3327,Image SLES15-SP5-CHOST-BYOS-EC2-2022-3327,Image SLES15-SP5-CHOST-BYOS-GCE-2022-3327,Image SLES15-SP5-CHOST-BYOS-SAP-CCloud-2022-3327,Image SLES15-SP5-GCE-2022-3327,Image SLES15-SP5-HPC-BYOS-GCE-2022-3327,Image SLES15-SP5-HPC-GCE-2022-3327,Image SLES15-SP5-Hardened-BYOS-GCE-2022-3327,Image SLES15-SP5-SAP-BYOS-GCE-2022-3327,Image SLES15-SP5-SAP-GCE-2022-3327,Image SLES15-SP5-SAP-Hardened-BYOS-GCE-2022-3327,Image SLES15-SP5-SAP-Hardened-GCE-2022-3327,Image SLES15-SP5-SAPCAL-GCE-2022-3327,SUSE-2022-3327,SUSE-SLE-Module-Basesystem-15-SP3-2022-3327,SUSE-SLE-Module-Basesystem-15-SP4-2022-3327,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3327,SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3327,SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3327,SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3327,SUSE-SLE-Product-SLES-15-SP1-BCL-2022-3327,SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-3327,SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3327,SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3327,SUSE-SLE-Product-SLES_SAP-15-SP1-2022-3327,SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3327,SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3327,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3327,SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3327,SUSE-SUSE-MicroOS-5.1-2022-3327,SUSE-SUSE-MicroOS-5.2-2022-3327,SUSE-Storage-6-2022-3327,SUSE-Storage-7-2022-3327,openSUSE-Leap-Micro-5.2-2022-3327,openSUSE-SLE-15.3-2022-3327,openSUSE-SLE-15.4-2022-3327 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20223327-1/ Link for SUSE-SU-2022:3327-1 https://lists.suse.com/pipermail/sle-security-updates/2022-September/012320.html E-Mail link for SUSE-SU-2022:3327-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1142847 SUSE Bug 1142847 https://bugzilla.suse.com/1150130 SUSE Bug 1150130 https://bugzilla.suse.com/1157805 SUSE Bug 1157805 https://bugzilla.suse.com/1164550 SUSE Bug 1164550 https://bugzilla.suse.com/1164569 SUSE Bug 1164569 https://bugzilla.suse.com/1177179 SUSE Bug 1177179 https://www.suse.com/security/cve/CVE-2019-13224/ SUSE CVE CVE-2019-13224 page https://www.suse.com/security/cve/CVE-2019-16163/ SUSE CVE CVE-2019-16163 page https://www.suse.com/security/cve/CVE-2019-19203/ SUSE CVE CVE-2019-19203 page https://www.suse.com/security/cve/CVE-2019-19204/ SUSE CVE CVE-2019-19204 page https://www.suse.com/security/cve/CVE-2019-19246/ SUSE CVE CVE-2019-19246 page https://www.suse.com/security/cve/CVE-2020-26159/ SUSE CVE CVE-2020-26159 page Container bci/php-apache:8 Container bci/php-fpm:8 Container bci/php:8 Container suse/sle-micro-rancher/5.2:latest Container suse/sle-micro-rancher/5.3:latest Container suse/sle-micro-rancher/5.4:latest Image SLES15-SP3-CHOST-BYOS-Aliyun Image SLES15-SP3-CHOST-BYOS-Azure Image SLES15-SP3-CHOST-BYOS-EC2 Image SLES15-SP3-CHOST-BYOS-GCE Image SLES15-SP3-CHOST-BYOS-SAP-CCloud Image SLES15-SP4-CHOST-BYOS Image SLES15-SP4-CHOST-BYOS-Aliyun Image SLES15-SP4-CHOST-BYOS-Azure Image SLES15-SP4-CHOST-BYOS-EC2 Image SLES15-SP4-CHOST-BYOS-GCE Image SLES15-SP4-CHOST-BYOS-SAP-CCloud Image SLES15-SP5-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-Aliyun Image SLES15-SP5-CHOST-BYOS-Azure Image SLES15-SP5-CHOST-BYOS-EC2 Image SLES15-SP5-CHOST-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-SAP-CCloud Image SLES15-SP5-GCE Image SLES15-SP5-HPC-BYOS-GCE Image SLES15-SP5-HPC-GCE Image SLES15-SP5-Hardened-BYOS-GCE Image SLES15-SP5-SAP-BYOS-GCE Image SLES15-SP5-SAP-GCE Image SLES15-SP5-SAP-Hardened-BYOS-GCE Image SLES15-SP5-SAP-Hardened-GCE Image SLES15-SP5-SAPCAL-GCE SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Server 15 SP1-BCL SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-BCL SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Manager Proxy 4.1 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 libonig4-6.7.0-150000.3.3.1 oniguruma-devel-6.7.0-150000.3.3.1 libonig4-6.7.0-150000.3.3.1 as a component of Container bci/php-apache:8 libonig4-6.7.0-150000.3.3.1 as a component of Container bci/php-fpm:8 libonig4-6.7.0-150000.3.3.1 as a component of Container bci/php:8 libonig4-6.7.0-150000.3.3.1 as a component of Container suse/sle-micro-rancher/5.2:latest libonig4-6.7.0-150000.3.3.1 as a component of Container suse/sle-micro-rancher/5.3:latest libonig4-6.7.0-150000.3.3.1 as a component of Container suse/sle-micro-rancher/5.4:latest libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP3-CHOST-BYOS-Aliyun libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP3-CHOST-BYOS-Azure libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP3-CHOST-BYOS-EC2 libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP3-CHOST-BYOS-GCE libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP3-CHOST-BYOS-SAP-CCloud libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP4-CHOST-BYOS libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP4-CHOST-BYOS-Aliyun libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP4-CHOST-BYOS-Azure libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP4-CHOST-BYOS-EC2 libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP4-CHOST-BYOS-GCE libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP4-CHOST-BYOS-SAP-CCloud libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP5-BYOS-GCE libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP5-CHOST-BYOS-Aliyun libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP5-CHOST-BYOS-Azure libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP5-CHOST-BYOS-EC2 libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP5-CHOST-BYOS-GCE libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP5-CHOST-BYOS-SAP-CCloud libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP5-GCE libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP5-HPC-BYOS-GCE libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP5-HPC-GCE libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP5-Hardened-BYOS-GCE libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP5-SAP-BYOS-GCE libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP5-SAP-GCE libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-GCE libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP5-SAP-Hardened-GCE libonig4-6.7.0-150000.3.3.1 as a component of Image SLES15-SP5-SAPCAL-GCE libonig4-6.7.0-150000.3.3.1 as a component of SUSE Enterprise Storage 6 oniguruma-devel-6.7.0-150000.3.3.1 as a component of SUSE Enterprise Storage 6 libonig4-6.7.0-150000.3.3.1 as a component of SUSE Enterprise Storage 7 oniguruma-devel-6.7.0-150000.3.3.1 as a component of SUSE Enterprise Storage 7 libonig4-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS oniguruma-devel-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libonig4-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS oniguruma-devel-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libonig4-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS oniguruma-devel-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS libonig4-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS oniguruma-devel-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libonig4-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise Micro 5.1 libonig4-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise Micro 5.2 libonig4-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 oniguruma-devel-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libonig4-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 oniguruma-devel-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libonig4-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL oniguruma-devel-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libonig4-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS oniguruma-devel-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libonig4-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP2-BCL oniguruma-devel-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP2-BCL libonig4-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS oniguruma-devel-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libonig4-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 oniguruma-devel-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libonig4-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 oniguruma-devel-6.7.0-150000.3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libonig4-6.7.0-150000.3.3.1 as a component of SUSE Manager Proxy 4.1 oniguruma-devel-6.7.0-150000.3.3.1 as a component of SUSE Manager Proxy 4.1 libonig4-6.7.0-150000.3.3.1 as a component of SUSE Manager Retail Branch Server 4.1 oniguruma-devel-6.7.0-150000.3.3.1 as a component of SUSE Manager Retail Branch Server 4.1 libonig4-6.7.0-150000.3.3.1 as a component of SUSE Manager Server 4.1 oniguruma-devel-6.7.0-150000.3.3.1 as a component of SUSE Manager Server 4.1 libonig4-6.7.0-150000.3.3.1 as a component of openSUSE Leap 15.3 oniguruma-devel-6.7.0-150000.3.3.1 as a component of openSUSE Leap 15.3 libonig4-6.7.0-150000.3.3.1 as a component of openSUSE Leap 15.4 oniguruma-devel-6.7.0-150000.3.3.1 as a component of openSUSE Leap 15.4 libonig4-6.7.0-150000.3.3.1 as a component of openSUSE Leap Micro 5.2 A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onig_new_deluxe(). Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust. CVE-2019-13224 Container bci/php-apache:8:libonig4-6.7.0-150000.3.3.1 Container bci/php-fpm:8:libonig4-6.7.0-150000.3.3.1 Container bci/php:8:libonig4-6.7.0-150000.3.3.1 Container suse/sle-micro-rancher/5.2:latest:libonig4-6.7.0-150000.3.3.1 Container suse/sle-micro-rancher/5.3:latest:libonig4-6.7.0-150000.3.3.1 Container suse/sle-micro-rancher/5.4:latest:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-Aliyun:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-Azure:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-EC2:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-Aliyun:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-Azure:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-EC2:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-SAP-CCloud:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-Aliyun:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-Azure:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-EC2:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-SAP-CCloud:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-HPC-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-HPC-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-Hardened-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-Hardened-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAPCAL-GCE:libonig4-6.7.0-150000.3.3.1 SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1 SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1 SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1 SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1 SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1 SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1 openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1 openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1 openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1 openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1 openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223327-1/ https://www.suse.com/security/cve/CVE-2019-13224.html CVE-2019-13224 https://bugzilla.suse.com/1142847 SUSE Bug 1142847 https://bugzilla.suse.com/1203568 SUSE Bug 1203568 Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c. CVE-2019-16163 Container bci/php-apache:8:libonig4-6.7.0-150000.3.3.1 Container bci/php-fpm:8:libonig4-6.7.0-150000.3.3.1 Container bci/php:8:libonig4-6.7.0-150000.3.3.1 Container suse/sle-micro-rancher/5.2:latest:libonig4-6.7.0-150000.3.3.1 Container suse/sle-micro-rancher/5.3:latest:libonig4-6.7.0-150000.3.3.1 Container suse/sle-micro-rancher/5.4:latest:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-Aliyun:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-Azure:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-EC2:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-Aliyun:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-Azure:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-EC2:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-SAP-CCloud:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-Aliyun:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-Azure:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-EC2:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-SAP-CCloud:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-HPC-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-HPC-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-Hardened-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-Hardened-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAPCAL-GCE:libonig4-6.7.0-150000.3.3.1 SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1 SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1 SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1 SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1 SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1 SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1 openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1 openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1 openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1 openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1 openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223327-1/ https://www.suse.com/security/cve/CVE-2019-16163.html CVE-2019-16163 https://bugzilla.suse.com/1150130 SUSE Bug 1150130 https://bugzilla.suse.com/1203568 SUSE Bug 1203568 An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read. CVE-2019-19203 Container bci/php-apache:8:libonig4-6.7.0-150000.3.3.1 Container bci/php-fpm:8:libonig4-6.7.0-150000.3.3.1 Container bci/php:8:libonig4-6.7.0-150000.3.3.1 Container suse/sle-micro-rancher/5.2:latest:libonig4-6.7.0-150000.3.3.1 Container suse/sle-micro-rancher/5.3:latest:libonig4-6.7.0-150000.3.3.1 Container suse/sle-micro-rancher/5.4:latest:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-Aliyun:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-Azure:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-EC2:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-Aliyun:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-Azure:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-EC2:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-SAP-CCloud:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-Aliyun:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-Azure:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-EC2:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-SAP-CCloud:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-HPC-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-HPC-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-Hardened-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-Hardened-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAPCAL-GCE:libonig4-6.7.0-150000.3.3.1 SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1 SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1 SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1 SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1 SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1 SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1 openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1 openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1 openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1 openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1 openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223327-1/ https://www.suse.com/security/cve/CVE-2019-19203.html CVE-2019-19203 https://bugzilla.suse.com/1164550 SUSE Bug 1164550 https://bugzilla.suse.com/1203568 SUSE Bug 1203568 An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read. CVE-2019-19204 Container bci/php-apache:8:libonig4-6.7.0-150000.3.3.1 Container bci/php-fpm:8:libonig4-6.7.0-150000.3.3.1 Container bci/php:8:libonig4-6.7.0-150000.3.3.1 Container suse/sle-micro-rancher/5.2:latest:libonig4-6.7.0-150000.3.3.1 Container suse/sle-micro-rancher/5.3:latest:libonig4-6.7.0-150000.3.3.1 Container suse/sle-micro-rancher/5.4:latest:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-Aliyun:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-Azure:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-EC2:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-Aliyun:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-Azure:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-EC2:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-SAP-CCloud:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-Aliyun:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-Azure:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-EC2:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-SAP-CCloud:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-HPC-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-HPC-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-Hardened-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-Hardened-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAPCAL-GCE:libonig4-6.7.0-150000.3.3.1 SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1 SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1 SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1 SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1 SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1 SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1 openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1 openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1 openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1 openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1 openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223327-1/ https://www.suse.com/security/cve/CVE-2019-19204.html CVE-2019-19204 https://bugzilla.suse.com/1164569 SUSE Bug 1164569 https://bugzilla.suse.com/1203568 SUSE Bug 1203568 Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c. CVE-2019-19246 Container bci/php-apache:8:libonig4-6.7.0-150000.3.3.1 Container bci/php-fpm:8:libonig4-6.7.0-150000.3.3.1 Container bci/php:8:libonig4-6.7.0-150000.3.3.1 Container suse/sle-micro-rancher/5.2:latest:libonig4-6.7.0-150000.3.3.1 Container suse/sle-micro-rancher/5.3:latest:libonig4-6.7.0-150000.3.3.1 Container suse/sle-micro-rancher/5.4:latest:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-Aliyun:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-Azure:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-EC2:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-Aliyun:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-Azure:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-EC2:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-SAP-CCloud:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-Aliyun:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-Azure:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-EC2:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-SAP-CCloud:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-HPC-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-HPC-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-Hardened-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-Hardened-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAPCAL-GCE:libonig4-6.7.0-150000.3.3.1 SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1 SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1 SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1 SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1 SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1 SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1 openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1 openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1 openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1 openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1 openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223327-1/ https://www.suse.com/security/cve/CVE-2019-19246.html CVE-2019-19246 https://bugzilla.suse.com/1157805 SUSE Bug 1157805 https://bugzilla.suse.com/1203568 SUSE Bug 1203568 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none. CVE-2020-26159 Container bci/php-apache:8:libonig4-6.7.0-150000.3.3.1 Container bci/php-fpm:8:libonig4-6.7.0-150000.3.3.1 Container bci/php:8:libonig4-6.7.0-150000.3.3.1 Container suse/sle-micro-rancher/5.2:latest:libonig4-6.7.0-150000.3.3.1 Container suse/sle-micro-rancher/5.3:latest:libonig4-6.7.0-150000.3.3.1 Container suse/sle-micro-rancher/5.4:latest:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-Aliyun:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-Azure:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-EC2:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP3-CHOST-BYOS-SAP-CCloud:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-Aliyun:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-Azure:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-EC2:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS-SAP-CCloud:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP4-CHOST-BYOS:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-Aliyun:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-Azure:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-EC2:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-CHOST-BYOS-SAP-CCloud:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-HPC-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-HPC-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-Hardened-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAP-Hardened-GCE:libonig4-6.7.0-150000.3.3.1 Image SLES15-SP5-SAPCAL-GCE:libonig4-6.7.0-150000.3.3.1 SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1 SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1 SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1 SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1 SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1 SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1 SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1 openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1 openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1 openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1 openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1 openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223327-1/ https://www.suse.com/security/cve/CVE-2020-26159.html CVE-2020-26159 https://bugzilla.suse.com/1177179 SUSE Bug 1177179 https://bugzilla.suse.com/1203568 SUSE Bug 1203568