Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-recodeUpgrade php-enchantUpgrade php-pecl-zipUpgrade php-mysqlndUpgrade php-pecl-rrdUpgrade php-mbstringUpgrade php-embeddedUpgrade php-xmlrpcUpgrade php-gdUpgrade php-pecl-apcu-develUpgrade libzip-toolsUpgrade php-processUpgrade php-dbaUpgrade php-soapUpgrade php-opcacheUpgrade php-ldapUpgrade php-gmpUpgrade libzipUpgrade apcu-panelUpgrade php-commonUpgrade libzip-develUpgrade php-pecl-apcuUpgrade php-odbcUpgrade phpUpgrade php-develUpgrade php-jsonUpgrade php-snmpUpgrade php-fpmUpgrade php-dbgUpgrade php-pdoUpgrade php-pecl-xdebugUpgrade php-pearUpgrade php-cliUpgrade php-intlUpgrade php-xmlUpgrade php-bcmathUpgrade php-pgsql | May 4, 2022 | Nov 25, 2019 |
| Alpine Linux | — | Upgrade oniguruma | Jan 3, 2020 | Nov 25, 2019 |
| Amazon Linux Ami 2 | — | Upgrade oniguruma-debuginfoUpgrade oniguruma-develUpgrade oniguruma | Apr 27, 2020 | Nov 25, 2019 |
| Centos_linux | — | Upgrade libzip-develUpgrade php-enchantUpgrade php-ldapUpgrade apcu-panelUpgrade php-ldap-debuginfoUpgrade php-pecl-zipUpgrade php-opcacheUpgrade php-gmp-debuginfoUpgrade php-gd-debuginfoUpgrade php-gdUpgrade php-pecl-rrdUpgrade php-pecl-apcu-debuginfoUpgrade php-snmpUpgrade libzipUpgrade php-recode-debuginfoUpgrade php-embedded-debuginfoUpgrade php-bcmathUpgrade php-embeddedUpgrade php-dbg-debuginfoUpgrade php-soap-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-apcuUpgrade php-xmlUpgrade php-mysqlndUpgrade libzip-toolsUpgrade php-bcmath-debuginfoUpgrade php-processUpgrade phpUpgrade php-recodeUpgrade php-debugsourceUpgrade php-intlUpgrade php-pecl-rrd-debugsourceUpgrade php-cliUpgrade php-pgsqlUpgrade php-jsonUpgrade libzip-tools-debuginfoUpgrade php-mbstringUpgrade php-develUpgrade php-pdoUpgrade php-intl-debuginfoUpgrade php-fpmUpgrade php-common-debuginfoUpgrade php-json-debuginfoUpgrade php-dbaUpgrade php-pecl-apcu-develUpgrade php-mbstring-debuginfoUpgrade php-pearUpgrade php-pecl-xdebug-debugsourceUpgrade php-opcache-debuginfoUpgrade php-enchant-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-gmpUpgrade php-xmlrpcUpgrade php-xml-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-odbc-debuginfoUpgrade php-fpm-debuginfoUpgrade php-snmp-debuginfoUpgrade php-dba-debuginfoUpgrade php-debuginfoUpgrade php-soapUpgrade php-pecl-xdebug-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-xdebugUpgrade php-cli-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade libzip-debugsourceUpgrade php-odbcUpgrade php-mysqlnd-debuginfoUpgrade php-commonUpgrade php-dbgUpgrade php-process-debuginfoUpgrade php-pdo-debuginfoUpgrade php-pecl-zip-debugsource | Sep 9, 2020 | Nov 25, 2019 |
| Debian | — | Upgrade libonig | Dec 5, 2019 | Nov 25, 2019 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Huawei Euleros 2_0_sp2 | — | Upgrade php-processUpgrade php-xmlrpcUpgrade php-gdUpgrade php-soapUpgrade phpUpgrade php-pdoUpgrade php-recodeUpgrade php-mysqlUpgrade php-commonUpgrade php-odbcUpgrade php-xmlUpgrade php-cliUpgrade php-pgsqlUpgrade php-ldap | Nov 3, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade php-xmlUpgrade php-gdUpgrade php-ldapUpgrade php-processUpgrade php-cliUpgrade phpUpgrade php-recodeUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-commonUpgrade php-pdoUpgrade php-mysqlUpgrade php-soapUpgrade php-pgsql | Sep 28, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade php-gdUpgrade php-soapUpgrade php-xmlrpcUpgrade php-pdoUpgrade php-odbcUpgrade php-pgsqlUpgrade php-mysqlUpgrade php-commonUpgrade php-recodeUpgrade php-processUpgrade php-ldapUpgrade php-cliUpgrade phpUpgrade php-xml | Feb 24, 2020 | Nov 25, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Jan 3, 2020 | Nov 25, 2019 |
| Oracle Solaris | — | Upgrade library/oniguruma to version 6.9.4-11.4.17.0.1.2.0 on Solaris 11.4 | Jan 19, 2021 | Nov 25, 2019 |
| Oracle_linux | — | Upgrade php-pgsqlUpgrade php-develUpgrade php-pecl-apcuUpgrade php-odbcUpgrade php-fpmUpgrade apcu-panelUpgrade php-dbgUpgrade php-intlUpgrade php-ldapUpgrade php-snmpUpgrade libzip-develUpgrade php-commonUpgrade php-xmlUpgrade php-enchantUpgrade php-opcacheUpgrade php-pecl-xdebugUpgrade php-recodeUpgrade php-pdoUpgrade phpUpgrade php-mbstringUpgrade php-cliUpgrade php-bcmathUpgrade libzip-toolsUpgrade php-pecl-rrdUpgrade php-processUpgrade php-xmlrpcUpgrade php-gdUpgrade libzipUpgrade php-embeddedUpgrade php-pearUpgrade php-gmpUpgrade php-soapUpgrade php-dbaUpgrade php-pecl-zipUpgrade php-jsonUpgrade php-pecl-apcu-develUpgrade php-mysqlnd | Sep 10, 2020 | Aug 13, 2019 |
| Redhat_linux | — | Upgrade libzip-develUpgrade php-odbcUpgrade php-gdUpgrade php-pdo-debuginfoUpgrade php-pgsqlUpgrade php-intl-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-pecl-apcu-develUpgrade php-cli-debuginfoUpgrade php-dbaUpgrade php-gmp-debuginfoUpgrade php-dba-debuginfoUpgrade php-debuginfoUpgrade libzip-debugsourceUpgrade php-snmp-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-mysqlndUpgrade php-soap-debuginfoUpgrade php-json-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzip-debuginfoUpgrade php-xml-debuginfoUpgrade php-embeddedUpgrade php-process-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-opcacheUpgrade php-pecl-rrdUpgrade libzip-toolsUpgrade php-embedded-debuginfoUpgrade php-processUpgrade phpUpgrade php-ldap-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-opcache-debuginfoUpgrade php-soapUpgrade php-pecl-apcu-debuginfoUpgrade php-intlUpgrade apcu-panelUpgrade php-gmpUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-fpmUpgrade php-bcmathUpgrade php-recodeUpgrade php-dbgUpgrade php-gd-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-zip-debuginfoUpgrade php-enchantUpgrade php-mbstringUpgrade php-mysqlnd-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-odbc-debuginfoUpgrade php-ldapUpgrade php-pecl-xdebug-debugsourceUpgrade php-jsonUpgrade php-commonUpgrade php-snmpUpgrade php-pdoUpgrade php-xmlrpcUpgrade php-pearUpgrade php-dbg-debuginfoUpgrade php-cliUpgrade php-develUpgrade php-pecl-xdebugUpgrade php-common-debuginfoUpgrade libzipUpgrade php-xmlUpgrade php-recode-debuginfoUpgrade php-pecl-zipUpgrade php-debugsourceUpgrade php-enchant-debuginfoNo solution existsUpgrade php-pecl-apcu | Sep 9, 2020 | Nov 25, 2019 |
| Rocky_linux | — | Upgrade php-gmpUpgrade php-gmp-debuginfoUpgrade php-xml-debuginfoUpgrade php-ldapUpgrade php-recode-debuginfoUpgrade php-cliUpgrade php-pecl-apcuUpgrade php-fpm-debuginfoUpgrade phpUpgrade php-json-debuginfoUpgrade php-enchant-debuginfoUpgrade php-snmpUpgrade php-enchantUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-zipUpgrade php-mbstring-debuginfoUpgrade php-gd-debuginfoUpgrade libzipUpgrade php-develUpgrade php-xmlUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-xdebugUpgrade php-common-debuginfoUpgrade php-debugsourceUpgrade php-pdoUpgrade php-odbcUpgrade php-pgsqlUpgrade php-pecl-apcu-debugsourceUpgrade php-jsonUpgrade php-odbc-debuginfoUpgrade php-fpmUpgrade php-commonUpgrade php-pecl-xdebug-debugsourceUpgrade php-embeddedUpgrade php-pecl-rrd-debugsourceUpgrade php-dba-debuginfoUpgrade php-dbgUpgrade libzip-debuginfoUpgrade php-embedded-debuginfoUpgrade php-bcmathUpgrade php-processUpgrade php-debuginfoUpgrade php-soap-debuginfoUpgrade php-dbaUpgrade php-process-debuginfoUpgrade php-dbg-debuginfoUpgrade php-intlUpgrade libzip-tools-debuginfoUpgrade php-ldap-debuginfoUpgrade php-pdo-debuginfoUpgrade php-opcache-debuginfoUpgrade libzip-develUpgrade php-cli-debuginfoUpgrade php-pecl-rrdUpgrade php-xmlrpcUpgrade php-bcmath-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-soapUpgrade php-pecl-apcu-develUpgrade php-mbstringUpgrade libzip-toolsUpgrade php-snmp-debuginfoUpgrade php-mysqlndUpgrade php-intl-debuginfoUpgrade php-opcacheUpgrade php-recodeUpgrade php-gdUpgrade php-pecl-rrd-debuginfoUpgrade libzip-debugsourceUpgrade php-pecl-apcu-debuginfo | Mar 12, 2024 | Nov 25, 2019 |
| Suse | — | Upgrade oniguruma-develUpgrade libonig4 | Aug 9, 2024 | Nov 25, 2019 |
| Ubuntu | — | Upgrade libonig2 (Ubuntu Pro)Upgrade libonig4 (Ubuntu Pro) | Aug 18, 2020 | Nov 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 25, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub