gpp_maybe Security update for oniguruma

SUSE-SUSE-MicroOS-5.2-2022-3327

This update for oniguruma fixes the following issues: - CVE-2019-19246: Fixed an out of bounds access during regular expression matching (bsc#1157805). - CVE-2019-19204: Fixed an out of bounds access when compiling a crafted regular expression (bsc#1164569). - CVE-2019-19203: Fixed an out of bounds access when performing a string search (bsc#1164550). - CVE-2019-16163: Fixed an uncontrolled recursion issue when compiling a crafted regular expression, which could lead to denial of service (bsc#1150130). - CVE-2020-26159: Fixed an off-by-one buffer overflow (bsc#1177179). - CVE-2019-13224: Fixed a potential use-after-free when handling multiple different encodings (bsc#1142847).

• Release Date
  Sep 21 2022
• References
  Bugzilla: 1164550, 1177179, 1164569, 1157805, 1142847, 1150130
  CVEs: CVE-2019-16163, CVE-2019-19203, CVE-2019-13224, CVE-2019-19204, CVE-2020-26159, CVE-2019-19246
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Micro 5.2 s390x

• Packages
  libonig4
  Regex Library Supporting Different Character Encodings

  6.7.0-150000.3.3.1 lock rpm

  oniguruma
  Regex Library Supporting Different Character Encodings

  6.7.0-150000.3.3.1 lock src

SUSE Linux Enterprise Micro for Rancher 5.2 aarch64

• Packages
  libonig4
  Regex Library Supporting Different Character Encodings

  6.7.0-150000.3.3.1 lock rpm

  oniguruma
  Regex Library Supporting Different Character Encodings

  6.7.0-150000.3.3.1 lock src

SUSE Linux Enterprise Micro for Rancher 5.2 x86_64

• Packages
  libonig4
  Regex Library Supporting Different Character Encodings

  6.7.0-150000.3.3.1 lock rpm

  oniguruma
  Regex Library Supporting Different Character Encodings

  6.7.0-150000.3.3.1 lock src