The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-commonUpgrade php-pecl-rrdUpgrade php-pgsqlUpgrade php-bcmathUpgrade php-soapUpgrade php-odbcUpgrade php-pearUpgrade php-mbstringUpgrade php-gmpUpgrade php-jsonUpgrade php-develUpgrade php-gdUpgrade php-dbgUpgrade php-xmlrpcUpgrade php-fpmUpgrade php-pdoUpgrade libzipUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebugUpgrade php-dbaUpgrade php-pecl-zipUpgrade php-mysqlndUpgrade onigurumaUpgrade php-intlUpgrade oniguruma-develUpgrade libzip-develUpgrade apcu-panelUpgrade php-cliUpgrade php-embeddedUpgrade php-pecl-apcuUpgrade php-recodeUpgrade php-xmlUpgrade php-processUpgrade phpUpgrade libzip-toolsUpgrade php-enchantUpgrade php-ldapUpgrade php-snmpUpgrade php-opcache | May 4, 2022 | Jul 10, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Nov 27, 2019 | Jul 10, 2019 |
| Amazon Linux Ami 2 | — | Upgrade oniguruma-debuginfoUpgrade onigurumaUpgrade oniguruma-devel | Apr 27, 2020 | Jul 10, 2019 |
| Amazon_linux | — | Upgrade oniguruma | Oct 4, 2019 | Jul 10, 2019 |
| Centos_linux | — | Upgrade php-xml-debuginfoUpgrade php-soapUpgrade php-process-debuginfoUpgrade php-dbgUpgrade libzip-tools-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-commonUpgrade php-fpm-debuginfoUpgrade php-gd-debuginfoUpgrade php-cli-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-ldap-debuginfoUpgrade libzip-develUpgrade php-dba-debuginfoUpgrade php-embeddedUpgrade php-pgsql-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pdo-debuginfoUpgrade libzip-debuginfoUpgrade php-json-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-odbcUpgrade php-bcmath-debuginfoUpgrade php-ldapUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-gmp-debuginfoUpgrade libzip-toolsUpgrade php-dbaUpgrade php-opcacheUpgrade php-soap-debuginfoUpgrade php-pgsqlUpgrade phpUpgrade php-debuginfoUpgrade php-gdUpgrade libzipUpgrade php-snmp-debuginfoUpgrade php-debugsourceUpgrade libzip-debugsourceUpgrade apcu-panelUpgrade oniguruma-debuginfoUpgrade php-pecl-apcu-develUpgrade php-intlUpgrade php-pearUpgrade php-pecl-xdebugUpgrade php-common-debuginfoUpgrade php-gmpUpgrade php-processUpgrade php-pecl-zipUpgrade php-cliUpgrade onigurumaUpgrade php-pecl-zip-debugsourceUpgrade php-xmlrpcUpgrade php-pecl-apcu-debuginfoUpgrade php-enchantUpgrade php-pdoUpgrade php-pecl-rrdUpgrade php-enchant-debuginfoUpgrade php-fpmUpgrade php-develUpgrade php-pecl-apcuUpgrade php-mysqlnd-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-recodeUpgrade php-recode-debuginfoUpgrade php-bcmathUpgrade php-jsonUpgrade php-pecl-rrd-debuginfoUpgrade php-opcache-debuginfoUpgrade php-mysqlndUpgrade oniguruma-debugsourceUpgrade php-dbg-debuginfoUpgrade php-xmlUpgrade php-mbstringUpgrade php-snmpUpgrade php-xmlrpc-debuginfo | Sep 9, 2020 | Jul 10, 2019 |
| Debian | — | Upgrade libonig | Jul 30, 2024 | Jul 10, 2019 |
| Freebsd | — | Upgrade oniguruma | Sep 8, 2019 | Sep 7, 2019 |
| Gentoo Linux | — | Upgrade dev-libs/oniguruma. | Nov 8, 2019 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade oniguruma | Sep 30, 2019 | Jul 10, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.3-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Jul 10, 2019 |
| Oracle_linux | — | Upgrade php-mbstringUpgrade php-pearUpgrade php-pecl-apcu-develUpgrade php-fpmUpgrade php-gmpUpgrade php-pdoUpgrade php-pecl-xdebugUpgrade php-develUpgrade php-commonUpgrade php-xmlUpgrade onigurumaUpgrade php-xmlrpcUpgrade OVMFUpgrade php-jsonUpgrade php-pecl-rrdUpgrade php-soapUpgrade php-processUpgrade php-pecl-zipUpgrade libzip-toolsUpgrade php-odbcUpgrade php-intlUpgrade apcu-panelUpgrade AAVMFUpgrade php-dbgUpgrade php-cliUpgrade php-ldapUpgrade php-dbaUpgrade php-embeddedUpgrade php-recodeUpgrade php-bcmathUpgrade php-gdUpgrade php-opcacheUpgrade phpUpgrade oniguruma-develUpgrade php-snmpUpgrade php-pecl-apcuUpgrade php-mysqlndUpgrade libzip-develUpgrade libzipUpgrade php-pgsqlUpgrade php-enchant | Sep 10, 2020 | Jun 27, 2019 |
| Redhat_linux | — | Upgrade php-mysqlndUpgrade oniguruma-debuginfoUpgrade php-intl-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-fpmUpgrade php-recodeUpgrade oniguruma-develUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-recode-debuginfoUpgrade php-soap-debuginfoUpgrade php-processUpgrade php-gd-debuginfoUpgrade libzipUpgrade php-snmpUpgrade php-snmp-debuginfoUpgrade php-opcacheUpgrade php-mbstringUpgrade php-pdoUpgrade oniguruma-debugsourceUpgrade phpUpgrade php-pecl-rrdUpgrade php-gmp-debuginfoUpgrade php-dbaUpgrade php-pecl-xdebugUpgrade php-pecl-zipUpgrade php-enchantUpgrade onigurumaUpgrade php-gdUpgrade php-xmlrpc-debuginfoUpgrade php-cliUpgrade php-soapUpgrade php-xmlUpgrade libzip-toolsUpgrade php-pearUpgrade php-xmlrpcUpgrade php-pecl-rrd-debugsourceUpgrade apcu-panelUpgrade libzip-debugsourceUpgrade php-embeddedUpgrade php-dbg-debuginfoUpgrade php-embedded-debuginfoUpgrade php-develUpgrade php-pgsql-debuginfoUpgrade php-bcmathUpgrade libzip-develUpgrade php-pdo-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-ldapUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-apcu-develUpgrade php-json-debuginfoUpgrade php-process-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-jsonUpgrade php-fpm-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-apcuUpgrade php-xml-debuginfoUpgrade php-odbc-debuginfoUpgrade php-pgsqlUpgrade php-pecl-apcu-debugsourceUpgrade php-opcache-debuginfoUpgrade php-common-debuginfoUpgrade php-odbcUpgrade php-gmpUpgrade php-dbgUpgrade libzip-debuginfoUpgrade php-intlUpgrade php-debuginfoUpgrade php-commonUpgrade php-cli-debuginfoUpgrade php-dba-debuginfo | Sep 9, 2020 | Jul 10, 2019 |
| Rocky_linux | — | Upgrade php-recode-debuginfoUpgrade php-cliUpgrade php-snmp-debuginfoUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-ldap-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-develUpgrade php-intl-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-xdebugUpgrade php-gmpUpgrade libzip-debugsourceUpgrade php-jsonUpgrade oniguruma-debugsourceUpgrade php-mysqlnd-debuginfoUpgrade php-dbaUpgrade php-odbc-debuginfoUpgrade php-opcache-debuginfoUpgrade php-xmlUpgrade onigurumaUpgrade php-mbstringUpgrade php-snmpUpgrade php-pecl-apcu-debuginfoUpgrade php-recodeUpgrade php-processUpgrade php-gdUpgrade php-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-dbg-debuginfoUpgrade php-soapUpgrade php-pecl-rrdUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcu-develUpgrade php-bcmath-debuginfoUpgrade libzip-toolsUpgrade php-dbgUpgrade php-pdoUpgrade oniguruma-debuginfoUpgrade libzipUpgrade php-fpm-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-opcacheUpgrade php-enchant-debuginfoUpgrade php-mysqlndUpgrade php-gmp-debuginfoUpgrade php-ldapUpgrade php-debugsourceUpgrade php-odbcUpgrade php-dba-debuginfoUpgrade libzip-debuginfoUpgrade php-cli-debuginfoUpgrade php-enchantUpgrade phpUpgrade oniguruma-develUpgrade php-commonUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-common-debuginfoUpgrade php-pdo-debuginfoUpgrade php-xml-debuginfoUpgrade php-soap-debuginfoUpgrade php-pecl-apcuUpgrade php-json-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-intlUpgrade php-embedded-debuginfoUpgrade php-pgsqlUpgrade php-pecl-rrd-debugsourceUpgrade libzip-develUpgrade php-process-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-gd-debuginfoUpgrade php-bcmathUpgrade php-pecl-xdebug-debugsource | Mar 12, 2024 | Jul 10, 2019 |
| Suse | — | Upgrade oniguruma-develUpgrade libonig4 | Aug 9, 2024 | Jul 10, 2019 |
| Ubuntu | — | Upgrade libonig | Nov 19, 2024 | Jul 10, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 10, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub