The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-jsonUpgrade php-pecl-xdebugUpgrade php-pdoUpgrade php-gmpUpgrade php-bcmathUpgrade php-mbstringUpgrade php-pgsqlUpgrade php-dbaUpgrade php-odbcUpgrade php-pecl-rrdUpgrade php-xmlrpcUpgrade php-pearUpgrade php-pecl-zipUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-commonUpgrade libzipUpgrade php-fpmUpgrade php-gdUpgrade php-dbgUpgrade php-develUpgrade php-xmlUpgrade php-embeddedUpgrade oniguruma-develUpgrade php-opcacheUpgrade php-recodeUpgrade php-intlUpgrade php-cliUpgrade php-pecl-apcuUpgrade apcu-panelUpgrade libzip-toolsUpgrade libzip-develUpgrade php-mysqlndUpgrade php-snmpUpgrade phpUpgrade php-ldapUpgrade onigurumaUpgrade php-enchantUpgrade php-process | May 4, 2022 | Jul 10, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Nov 27, 2019 | Jul 10, 2019 |
| Amazon Linux Ami 2 | — | Upgrade oniguruma-develUpgrade oniguruma-debuginfoUpgrade oniguruma | Apr 27, 2020 | Jul 10, 2019 |
| Amazon_linux | — | Upgrade oniguruma | Oct 4, 2019 | Jul 10, 2019 |
| Centos_linux | — | Upgrade php-odbc-debuginfoUpgrade php-debugsourceUpgrade php-pgsqlUpgrade php-gdUpgrade libzipUpgrade php-mbstring-debuginfoUpgrade apcu-panelUpgrade libzip-tools-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-cli-debuginfoUpgrade php-xml-debuginfoUpgrade php-embedded-debuginfoUpgrade php-process-debuginfoUpgrade php-snmp-debuginfoUpgrade php-soapUpgrade php-commonUpgrade php-embeddedUpgrade php-pecl-zip-debuginfoUpgrade php-ldap-debuginfoUpgrade php-dba-debuginfoUpgrade php-dbgUpgrade php-soap-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-apcu-develUpgrade libzip-debugsourceUpgrade php-debuginfoUpgrade php-intlUpgrade phpUpgrade libzip-debuginfoUpgrade oniguruma-debuginfoUpgrade php-opcacheUpgrade php-pecl-rrd-debugsourceUpgrade php-json-debuginfoUpgrade libzip-develUpgrade php-gd-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-ldapUpgrade php-dbaUpgrade php-pecl-xdebug-debugsourceUpgrade php-gmp-debuginfoUpgrade libzip-toolsUpgrade php-odbcUpgrade php-bcmath-debuginfoUpgrade php-xmlrpcUpgrade php-enchantUpgrade php-mbstringUpgrade php-develUpgrade php-pecl-zipUpgrade php-mysqlnd-debuginfoUpgrade php-cliUpgrade php-opcache-debuginfoUpgrade php-recodeUpgrade php-pecl-apcu-debuginfoUpgrade php-mysqlndUpgrade php-pecl-xdebug-debuginfoUpgrade onigurumaUpgrade php-pecl-zip-debugsourceUpgrade oniguruma-debugsourceUpgrade php-recode-debuginfoUpgrade php-gmpUpgrade php-snmpUpgrade php-processUpgrade php-fpmUpgrade php-pecl-xdebugUpgrade php-intl-debuginfoUpgrade php-common-debuginfoUpgrade php-pearUpgrade php-pecl-rrdUpgrade php-enchant-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcuUpgrade php-jsonUpgrade php-pecl-rrd-debuginfoUpgrade php-bcmathUpgrade php-xmlUpgrade php-pdoUpgrade php-dbg-debuginfo | Sep 9, 2020 | Jul 10, 2019 |
| Debian | — | Upgrade libonig | Jul 30, 2024 | Jul 10, 2019 |
| Freebsd | — | Upgrade oniguruma | Sep 8, 2019 | Sep 7, 2019 |
| Gentoo Linux | — | Upgrade dev-libs/oniguruma. | Nov 8, 2019 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade oniguruma | Sep 30, 2019 | Jul 10, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.3-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Jul 10, 2019 |
| Oracle_linux | — | Upgrade php-pgsqlUpgrade php-recodeUpgrade php-intlUpgrade php-bcmathUpgrade oniguruma-develUpgrade php-dbgUpgrade php-dbaUpgrade phpUpgrade php-odbcUpgrade libzip-develUpgrade php-pecl-apcuUpgrade php-mysqlndUpgrade php-snmpUpgrade php-cliUpgrade php-opcacheUpgrade php-enchantUpgrade php-ldapUpgrade php-gdUpgrade php-embeddedUpgrade AAVMFUpgrade libzipUpgrade apcu-panelUpgrade libzip-toolsUpgrade php-pdoUpgrade php-gmpUpgrade php-xmlUpgrade php-mbstringUpgrade php-commonUpgrade php-pecl-rrdUpgrade php-processUpgrade php-soapUpgrade php-jsonUpgrade onigurumaUpgrade php-pecl-xdebugUpgrade php-pecl-apcu-develUpgrade OVMFUpgrade php-develUpgrade php-xmlrpcUpgrade php-pearUpgrade php-fpmUpgrade php-pecl-zip | Sep 10, 2020 | Jun 27, 2019 |
| Redhat_linux | — | Upgrade php-gdUpgrade php-soapUpgrade php-gmp-debuginfoUpgrade php-soap-debuginfoUpgrade libzip-develUpgrade php-dbaUpgrade libzip-tools-debuginfoUpgrade oniguruma-debuginfoUpgrade php-cliUpgrade php-embedded-debuginfoUpgrade php-fpmUpgrade php-gd-debuginfoUpgrade php-ldap-debuginfoUpgrade libzip-toolsUpgrade php-xmlUpgrade php-pecl-rrd-debuginfoUpgrade php-processUpgrade oniguruma-debugsourceUpgrade php-pecl-zipUpgrade php-opcacheUpgrade php-xmlrpcUpgrade php-debugsourceUpgrade php-pecl-xdebugUpgrade php-bcmathUpgrade php-embeddedUpgrade php-dbg-debuginfoUpgrade php-recode-debuginfoUpgrade php-develUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade libzipUpgrade php-enchantUpgrade php-pgsql-debuginfoUpgrade php-intl-debuginfoUpgrade apcu-panelUpgrade libzip-debugsourceUpgrade php-recodeUpgrade php-mbstringUpgrade php-mysqlndUpgrade php-bcmath-debuginfoUpgrade php-snmpUpgrade php-snmp-debuginfoUpgrade php-pearUpgrade onigurumaUpgrade oniguruma-develUpgrade php-pecl-apcu-debuginfoUpgrade php-pdoUpgrade phpUpgrade php-pecl-rrdUpgrade php-json-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-gmpUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-enchant-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pgsqlUpgrade php-pecl-zip-debuginfoUpgrade php-ldapUpgrade php-jsonUpgrade php-pecl-zip-debugsourceUpgrade php-opcache-debuginfoUpgrade php-dbgUpgrade php-xml-debuginfoUpgrade php-odbcUpgrade php-pecl-apcuUpgrade php-process-debuginfoUpgrade php-intlUpgrade php-mysqlnd-debuginfoUpgrade php-common-debuginfoUpgrade php-pdo-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-cli-debuginfoUpgrade php-pecl-apcu-develUpgrade libzip-debuginfoUpgrade php-dba-debuginfoUpgrade php-debuginfoUpgrade php-odbc-debuginfoUpgrade php-common | Sep 9, 2020 | Jul 10, 2019 |
| Rocky_linux | — | Upgrade php-ldap-debuginfoUpgrade php-soapUpgrade php-debuginfoUpgrade php-xmlrpcUpgrade php-snmpUpgrade php-jsonUpgrade libzip-debugsourceUpgrade php-cliUpgrade php-pecl-zip-debugsourceUpgrade php-recode-debuginfoUpgrade php-mbstringUpgrade php-dbaUpgrade php-odbc-debuginfoUpgrade onigurumaUpgrade php-develUpgrade php-dbg-debuginfoUpgrade php-fpmUpgrade libzip-tools-debuginfoUpgrade php-processUpgrade php-recodeUpgrade php-pecl-xdebugUpgrade php-gdUpgrade php-opcache-debuginfoUpgrade oniguruma-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-gmpUpgrade php-mysqlnd-debuginfoUpgrade php-snmp-debuginfoUpgrade php-intl-debuginfoUpgrade php-xmlUpgrade php-pecl-rrdUpgrade php-ldapUpgrade php-pecl-apcuUpgrade php-pecl-zipUpgrade php-embeddedUpgrade php-pgsql-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-bcmath-debuginfoUpgrade oniguruma-develUpgrade php-odbcUpgrade php-commonUpgrade php-pdo-debuginfoUpgrade php-common-debuginfoUpgrade php-enchant-debuginfoUpgrade php-dbgUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebug-debuginfoUpgrade php-opcacheUpgrade php-fpm-debuginfoUpgrade php-mysqlndUpgrade php-intlUpgrade libzip-develUpgrade php-pecl-xdebug-debugsourceUpgrade libzip-toolsUpgrade php-mbstring-debuginfoUpgrade php-bcmathUpgrade php-process-debuginfoUpgrade php-pgsqlUpgrade php-pecl-rrd-debugsourceUpgrade php-gd-debuginfoUpgrade php-embedded-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade phpUpgrade php-pdoUpgrade php-cli-debuginfoUpgrade php-enchantUpgrade libzipUpgrade oniguruma-debuginfoUpgrade libzip-debuginfoUpgrade php-gmp-debuginfoUpgrade php-debugsourceUpgrade php-dba-debuginfoUpgrade php-xml-debuginfoUpgrade php-json-debuginfoUpgrade php-soap-debuginfo | Mar 12, 2024 | Jul 10, 2019 |
| Suse | — | Upgrade libonig4Upgrade oniguruma-devel | Aug 9, 2024 | Jul 10, 2019 |
| Ubuntu | — | Upgrade libonig | Nov 19, 2024 | Jul 10, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 10, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub