critical
CVE-2019-13224
oniguruma: Use-after-free in onig_new_deluxe() in regext.c
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.8CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H
Trivy's own label is CRITICAL. Rated critical by NVD, Photon OS. Rated lower by Red Hat (medium), AlmaLinux (medium), Amazon (medium), Oracle (medium), Rocky Linux (medium), Ubuntu (medium).
Description
A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onig_new_deluxe(). Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| Photon OS 2.0 | oniguruma | 6.5.0-2.ph2 |
| Photon OS 3.0 | oniguruma | 6.9.0-2.ph3 |
| alma 8 | oniguruma, oniguruma-devel, php:7.3::apcu-panel and 36 more | 6.8.2-2.1.el8_9 and 7 more |
| alpine 3.10 | php7 | 7.3.9-r0 |
| alpine 3.11 | php7 | 7.3.9-r0 |
| alpine 3.12 | php7 | 7.3.9-r0 |
| alpine 3.13 | php7 | 7.3.9-r0 |
| alpine 3.14 | php7 | 7.3.9-r0 |
| alpine 3.15 | php7 | 7.3.9-r0 |
| alpine 3.7 | php7 | 7.1.32-r0 |
| amazon linux 1 | oniguruma, oniguruma-debuginfo, oniguruma-devel and 65 more | 5.9.6-4.4.amzn1 and 2 more |
| amazon linux 2 | oniguruma, oniguruma-debuginfo, oniguruma-devel | 5.9.6-1.amzn2.0.1 |
Show all 394 entries from 46 sources
| Source | Package | Fixed in |
|---|---|---|
| Photon OS 2.0 | oniguruma | 6.5.0-2.ph2 |
| Photon OS 3.0 | oniguruma | 6.9.0-2.ph3 |
| alma 8 | oniguruma | 6.8.2-2.1.el8_9 |
| alma 8 | oniguruma-devel | 6.8.2-2.1.el8_9 |
| alma 8 | php:7.3::apcu-panel | 5.1.17-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::libzip | 1.5.2-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::libzip-devel | 1.5.2-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::libzip-tools | 1.5.2-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-bcmath | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-cli | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-common | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-dba | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-dbg | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-devel | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-embedded | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-enchant | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-fpm | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-gd | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-gmp | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-intl | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-json | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-ldap | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-mbstring | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-mysqlnd | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-odbc | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-opcache | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-pdo | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-pear | 1:1.10.9-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-pecl-apcu | 5.1.17-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-pecl-apcu-devel | 5.1.17-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-pecl-rrd | 2.0.1-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-pecl-xdebug | 2.8.0-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-pecl-zip | 1.15.4-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-pgsql | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-process | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-recode | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-snmp | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-soap | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-xml | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alma 8 | php:7.3::php-xmlrpc | 7.3.20-1.module_el8.3.0+2009+b272fdef |
| alpine 3.10 | php7 | 7.3.9-r0 |
| alpine 3.11 | php7 | 7.3.9-r0 |
| alpine 3.12 | php7 | 7.3.9-r0 |
| alpine 3.13 | php7 | 7.3.9-r0 |
| alpine 3.14 | php7 | 7.3.9-r0 |
| alpine 3.15 | php7 | 7.3.9-r0 |
| alpine 3.7 | php7 | 7.1.32-r0 |
| amazon linux 1 | oniguruma | 5.9.6-4.4.amzn1 |
| amazon linux 1 | oniguruma-debuginfo | 5.9.6-4.4.amzn1 |
| amazon linux 1 | oniguruma-devel | 5.9.6-4.4.amzn1 |
| amazon linux 1 | php71 | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-bcmath | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-cli | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-common | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-dba | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-dbg | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-debuginfo | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-devel | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-embedded | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-enchant | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-fpm | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-gd | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-gmp | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-imap | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-intl | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-json | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-ldap | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-mbstring | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-mcrypt | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-mysqlnd | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-odbc | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-opcache | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-pdo | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-pdo-dblib | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-pgsql | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-process | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-pspell | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-recode | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-snmp | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-soap | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-tidy | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-xml | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php71-xmlrpc | 7.1.31-1.41.amzn1 |
| amazon linux 1 | php73 | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-bcmath | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-cli | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-common | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-dba | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-dbg | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-debuginfo | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-devel | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-embedded | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-enchant | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-fpm | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-gd | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-gmp | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-imap | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-intl | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-json | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-ldap | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-mbstring | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-mysqlnd | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-odbc | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-opcache | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-pdo | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-pdo-dblib | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-pgsql | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-process | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-pspell | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-recode | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-snmp | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-soap | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-tidy | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-xml | 7.3.8-1.18.amzn1 |
| amazon linux 1 | php73-xmlrpc | 7.3.8-1.18.amzn1 |
| amazon linux 2 | oniguruma | 5.9.6-1.amzn2.0.1 |
| amazon linux 2 | oniguruma-debuginfo | 5.9.6-1.amzn2.0.1 |
| amazon linux 2 | oniguruma-devel | 5.9.6-1.amzn2.0.1 |
| debian 10 | libonig | no fix listed |
| debian 10 | php7.3 | 7.3.9-1~deb10u1 |
| debian 11 | libonig | 6.9.2-1 |
| debian 12 | libonig | 6.9.2-1 |
| debian 13 | libonig | 6.9.2-1 |
| debian 14 | libonig | 6.9.2-1 |
| debian 8 | libonig | 5.9.5-3.2+deb8u2 |
| debian 9 | libonig | 6.1.3-2+deb9u1 |
| debian 9 | php7.0 | 7.0.33-0+deb9u5 |
| echo | libonig | 6.9.2-1 |
| Oracle Linux 7 | AAVMF | 1:1.3.2-1.el7 |
| Oracle Linux 7 | OVMF | 1:1.3.2-1.el7 |
| Oracle Linux 8 | apcu-panel | 5.1.17-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | libzip | 1.5.2-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | libzip-devel | 1.5.2-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | libzip-tools | 1.5.2-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | oniguruma | 6.8.2-2.1.el8_9 |
| Oracle Linux 8 | oniguruma-devel | 6.8.2-2.1.el8_9 |
| Oracle Linux 8 | php | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-bcmath | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-cli | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-common | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-dba | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-dbg | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-devel | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-embedded | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-enchant | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-fpm | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-gd | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-gmp | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-intl | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-json | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-ldap | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-mbstring | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-mysqlnd | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-odbc | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-opcache | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-pdo | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-pear | 1:1.10.9-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | php-pecl-apcu | 5.1.17-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | php-pecl-apcu-devel | 5.1.17-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | php-pecl-rrd | 2.0.1-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | php-pecl-xdebug | 2.8.0-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | php-pecl-zip | 1.15.4-1.module+el8.2.0+5569+98c8b30d |
| Oracle Linux 8 | php-pgsql | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-process | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-recode | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-snmp | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-soap | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-xml | 7.3.20-1.module+el8.2.0+7784+4033621d |
| Oracle Linux 8 | php-xmlrpc | 7.3.20-1.module+el8.2.0+7784+4033621d |
| rapidfort ubuntu 20.04 | groonga | no fix listed |
| rapidfort ubuntu 22.04 | groonga | no fix listed |
| rapidfort ubuntu 24.04 | groonga | no fix listed |
| Red Hat | oniguruma | no fix listed |
| Red Hat | oniguruma-devel | no fix listed |
| Red Hat | php | no fix listed |
| Red Hat | php-bcmath | no fix listed |
| Red Hat | php-cli | no fix listed |
| Red Hat | php-common | no fix listed |
| Red Hat | php-dba | no fix listed |
| Red Hat | php-devel | no fix listed |
| Red Hat | php-embedded | no fix listed |
| Red Hat | php-enchant | no fix listed |
| Red Hat | php-fpm | no fix listed |
| Red Hat | php-gd | no fix listed |
| Red Hat | php-imap | no fix listed |
| Red Hat | php-intl | no fix listed |
| Red Hat | php-ldap | no fix listed |
| Red Hat | php-mbstring | no fix listed |
| Red Hat | php-mysql | no fix listed |
| Red Hat | php-mysqlnd | no fix listed |
| Red Hat | php-odbc | no fix listed |
| Red Hat | php-pdo | no fix listed |
| Red Hat | php-pgsql | no fix listed |
| Red Hat | php-process | no fix listed |
| Red Hat | php-pspell | no fix listed |
| Red Hat | php-recode | no fix listed |
| Red Hat | php-snmp | no fix listed |
| Red Hat | php-soap | no fix listed |
| Red Hat | php-tidy | no fix listed |
| Red Hat | php-xml | no fix listed |
| Red Hat | php-xmlrpc | no fix listed |
| Red Hat | php-zts | no fix listed |
| Red Hat | php:7.2::apcu-panel | no fix listed |
| Red Hat | php:7.2::libzip | no fix listed |
| Red Hat | php:7.2::libzip-devel | no fix listed |
| Red Hat | php:7.2::libzip-tools | no fix listed |
| Red Hat | php:7.2::php | no fix listed |
| Red Hat | php:7.2::php-bcmath | no fix listed |
| Red Hat | php:7.2::php-cli | no fix listed |
| Red Hat | php:7.2::php-common | no fix listed |
| Red Hat | php:7.2::php-dba | no fix listed |
| Red Hat | php:7.2::php-dbg | no fix listed |
| Red Hat | php:7.2::php-devel | no fix listed |
| Red Hat | php:7.2::php-embedded | no fix listed |
| Red Hat | php:7.2::php-enchant | no fix listed |
| Red Hat | php:7.2::php-ffi | no fix listed |
| Red Hat | php:7.2::php-fpm | no fix listed |
| Red Hat | php:7.2::php-gd | no fix listed |
| Red Hat | php:7.2::php-gmp | no fix listed |
| Red Hat | php:7.2::php-intl | no fix listed |
| Red Hat | php:7.2::php-json | no fix listed |
| Red Hat | php:7.2::php-ldap | no fix listed |
| Red Hat | php:7.2::php-mbstring | no fix listed |
| Red Hat | php:7.2::php-mysqlnd | no fix listed |
| Red Hat | php:7.2::php-odbc | no fix listed |
| Red Hat | php:7.2::php-opcache | no fix listed |
| Red Hat | php:7.2::php-pdo | no fix listed |
| Red Hat | php:7.2::php-pear | no fix listed |
| Red Hat | php:7.2::php-pecl-apcu | no fix listed |
| Red Hat | php:7.2::php-pecl-apcu-devel | no fix listed |
| Red Hat | php:7.2::php-pecl-rrd | no fix listed |
| Red Hat | php:7.2::php-pecl-xdebug | no fix listed |
| Red Hat | php:7.2::php-pecl-xdebug3 | no fix listed |
| Red Hat | php:7.2::php-pecl-zip | no fix listed |
| Red Hat | php:7.2::php-pgsql | no fix listed |
| Red Hat | php:7.2::php-process | no fix listed |
| Red Hat | php:7.2::php-recode | no fix listed |
| Red Hat | php:7.2::php-snmp | no fix listed |
| Red Hat | php:7.2::php-soap | no fix listed |
| Red Hat | php:7.2::php-xml | no fix listed |
| Red Hat | php:7.2::php-xmlrpc | no fix listed |
| Red Hat | rh-php70-php | no fix listed |
| Red Hat | rh-php70-php-bcmath | no fix listed |
| Red Hat | rh-php70-php-cli | no fix listed |
| Red Hat | rh-php70-php-common | no fix listed |
| Red Hat | rh-php70-php-dba | no fix listed |
| Red Hat | rh-php70-php-dbg | no fix listed |
| Red Hat | rh-php70-php-devel | no fix listed |
| Red Hat | rh-php70-php-embedded | no fix listed |
| Red Hat | rh-php70-php-enchant | no fix listed |
| Red Hat | rh-php70-php-fpm | no fix listed |
| Red Hat | rh-php70-php-gd | no fix listed |
| Red Hat | rh-php70-php-gmp | no fix listed |
| Red Hat | rh-php70-php-imap | no fix listed |
| Red Hat | rh-php70-php-intl | no fix listed |
| Red Hat | rh-php70-php-json | no fix listed |
| Red Hat | rh-php70-php-ldap | no fix listed |
| Red Hat | rh-php70-php-mbstring | no fix listed |
| Red Hat | rh-php70-php-mysqlnd | no fix listed |
| Red Hat | rh-php70-php-odbc | no fix listed |
| Red Hat | rh-php70-php-opcache | no fix listed |
| Red Hat | rh-php70-php-pdo | no fix listed |
| Red Hat | rh-php70-php-pgsql | no fix listed |
| Red Hat | rh-php70-php-process | no fix listed |
| Red Hat | rh-php70-php-pspell | no fix listed |
| Red Hat | rh-php70-php-recode | no fix listed |
| Red Hat | rh-php70-php-snmp | no fix listed |
| Red Hat | rh-php70-php-soap | no fix listed |
| Red Hat | rh-php70-php-tidy | no fix listed |
| Red Hat | rh-php70-php-xml | no fix listed |
| Red Hat | rh-php70-php-xmlrpc | no fix listed |
| Red Hat | rh-php70-php-zip | no fix listed |
| Red Hat | rh-php72-php | no fix listed |
| Red Hat | rh-php72-php-bcmath | no fix listed |
| Red Hat | rh-php72-php-cli | no fix listed |
| Red Hat | rh-php72-php-common | no fix listed |
| Red Hat | rh-php72-php-dba | no fix listed |
| Red Hat | rh-php72-php-dbg | no fix listed |
| Red Hat | rh-php72-php-devel | no fix listed |
| Red Hat | rh-php72-php-embedded | no fix listed |
| Red Hat | rh-php72-php-enchant | no fix listed |
| Red Hat | rh-php72-php-fpm | no fix listed |
| Red Hat | rh-php72-php-gd | no fix listed |
| Red Hat | rh-php72-php-gmp | no fix listed |
| Red Hat | rh-php72-php-intl | no fix listed |
| Red Hat | rh-php72-php-json | no fix listed |
| Red Hat | rh-php72-php-ldap | no fix listed |
| Red Hat | rh-php72-php-mbstring | no fix listed |
| Red Hat | rh-php72-php-mysqlnd | no fix listed |
| Red Hat | rh-php72-php-odbc | no fix listed |
| Red Hat | rh-php72-php-opcache | no fix listed |
| Red Hat | rh-php72-php-pdo | no fix listed |
| Red Hat | rh-php72-php-pgsql | no fix listed |
| Red Hat | rh-php72-php-process | no fix listed |
| Red Hat | rh-php72-php-pspell | no fix listed |
| Red Hat | rh-php72-php-recode | no fix listed |
| Red Hat | rh-php72-php-snmp | no fix listed |
| Red Hat | rh-php72-php-soap | no fix listed |
| Red Hat | rh-php72-php-xml | no fix listed |
| Red Hat | rh-php72-php-xmlrpc | no fix listed |
| Red Hat | rh-php72-php-zip | no fix listed |
| rocky 8 | php | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-bcmath | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-cli | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-common | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-dba | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-dbg | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-devel | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-embedded | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-enchant | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-fpm | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-gd | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-gmp | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-intl | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-json | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-ldap | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-mbstring | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-mysqlnd | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-odbc | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-opcache | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-pdo | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-pgsql | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-process | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-recode | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-snmp | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-soap | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-xml | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php-xmlrpc | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::apcu-panel | 5.1.17-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::libzip | 1.5.2-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::libzip-devel | 1.5.2-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::libzip-tools | 1.5.2-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-bcmath | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-cli | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-common | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-dba | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-dbg | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-devel | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-embedded | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-enchant | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-fpm | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-gd | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-gmp | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-intl | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-json | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-ldap | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-mbstring | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-mysqlnd | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-odbc | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-opcache | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-pdo | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-pear | 1:1.10.9-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-pecl-apcu | 5.1.17-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-pecl-apcu-devel | 5.1.17-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-pecl-rrd | 2.0.1-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-pecl-xdebug | 2.8.0-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-pecl-zip | 1.15.4-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-pgsql | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-process | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-recode | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-snmp | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-soap | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-xml | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| rocky 8 | php:7.3::php-xmlrpc | 7.3.20-1.module+el8.4.0+414+2e7afcdd |
| ubuntu 14.04-ESM | libonig | 5.9.1-1ubuntu1.1+esm1 |
| ubuntu 14.04-ESM | php5 | 5.5.9+dfsg-1ubuntu4.29+esm4 |
| ubuntu 16.04-ESM | libonig | 5.9.6-1ubuntu0.1+esm1 |
| ubuntu 18.04-ESM | groonga | no fix listed |
| ubuntu 18.04-ESM | libonig | 6.7.0-1ubuntu0.1~esm1 |
| ubuntu 18.04-ESM | mudlet | no fix listed |
| ubuntu 19.10 | libonig | 6.9.2-1 |
| ubuntu 20.04 | libonig | 6.9.2-1 |
| ubuntu 20.04-ESM | groonga | no fix listed |
| ubuntu 20.04-ESM | libonig | 6.9.2-1 |
| ubuntu 20.04-ESM | mudlet | no fix listed |
| ubuntu 20.10 | libonig | 6.9.2-1 |
| ubuntu 21.04 | libonig | 6.9.2-1 |
| ubuntu 21.10 | libonig | 6.9.2-1 |
| ubuntu 22.04 | groonga | no fix listed |
| ubuntu 22.04 | libonig | 6.9.2-1 |
| ubuntu 22.10 | libonig | 6.9.2-1 |
| ubuntu 23.04 | libonig | 6.9.2-1 |
| ubuntu 23.10 | libonig | 6.9.2-1 |
| ubuntu 24.04 | groonga | no fix listed |
| ubuntu 24.04 | libonig | 6.9.2-1 |
| ubuntu 24.10 | libonig | 6.9.2-1 |
| ubuntu 25.04 | libonig | 6.9.2-1 |
| ubuntu 25.10 | libonig | 6.9.2-1 |
| ubuntu 26.04 | groonga | no fix listed |
| ubuntu 26.04 | libonig | 6.9.2-1 |
| ubuntu 26.10 | groonga | no fix listed |
| ubuntu 26.10 | libonig | 6.9.2-1 |
References
- https://access.redhat.com/errata/RHSA-2024:0889
- https://access.redhat.com/security/cve/CVE-2019-13224
- https://bugzilla.redhat.com/1728970
- https://bugzilla.redhat.com/1768997
- https://bugzilla.redhat.com/1802051
- https://bugzilla.redhat.com/1802061
- https://bugzilla.redhat.com/1802068
- https://bugzilla.redhat.com/show_bug.cgi?id=1724152
All 66 references
- https://bugzilla.redhat.com/show_bug.cgi?id=1724154
- https://bugzilla.redhat.com/show_bug.cgi?id=1728965
- https://bugzilla.redhat.com/show_bug.cgi?id=1728970
- https://bugzilla.redhat.com/show_bug.cgi?id=1735494
- https://bugzilla.redhat.com/show_bug.cgi?id=1739459
- https://bugzilla.redhat.com/show_bug.cgi?id=1739465
- https://bugzilla.redhat.com/show_bug.cgi?id=1768997
- https://bugzilla.redhat.com/show_bug.cgi?id=1777537
- https://bugzilla.redhat.com/show_bug.cgi?id=1786570
- https://bugzilla.redhat.com/show_bug.cgi?id=1786572
- https://bugzilla.redhat.com/show_bug.cgi?id=1788258
- https://bugzilla.redhat.com/show_bug.cgi?id=1797776
- https://bugzilla.redhat.com/show_bug.cgi?id=1797779
- https://bugzilla.redhat.com/show_bug.cgi?id=1802061
- https://bugzilla.redhat.com/show_bug.cgi?id=1802068
- https://bugzilla.redhat.com/show_bug.cgi?id=1808532
- https://bugzilla.redhat.com/show_bug.cgi?id=1808536
- https://bugzilla.redhat.com/show_bug.cgi?id=1820601
- https://bugzilla.redhat.com/show_bug.cgi?id=1820604
- https://bugzilla.redhat.com/show_bug.cgi?id=1820627
- https://bugzilla.redhat.com/show_bug.cgi?id=1837842
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11039
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11040
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11041
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11042
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11045
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11047
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11048
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11050
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13224
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13225
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16163
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19203
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19204
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19246
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20454
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7059
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7060
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7062
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7063
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7064
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7065
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7066
- https://errata.almalinux.org/8/ALSA-2024-0889.html
- https://errata.rockylinux.org/RLSA-2020:3662
- https://github.com/kkos/oniguruma/commit/0f7f61ed1b7b697e283e37bd2d731d0bd57adb55
- https://linux.oracle.com/cve/CVE-2019-13224.html
- https://linux.oracle.com/errata/ELSA-2024-0889.html
- https://lists.debian.org/debian-lts-announce/2019/07/msg00013.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JWCPDTZOIUKGMFAD5NAKUB7FPJFAIQN5/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SNL26OZSQRVLEO6JRNUVIMZTICXBNEQW/
- https://nvd.nist.gov/vuln/detail/CVE-2019-13224
- https://security.gentoo.org/glsa/201911-03
- https://support.f5.com/csp/article/K00103182
- https://support.f5.com/csp/article/K00103182?utm_source=f5support&%3Butm_medium=RSS
- https://ubuntu.com/security/notices/USN-4088-1
- https://usn.ubuntu.com/4088-1/
- https://www.cve.org/CVERecord?id=CVE-2019-13224