SUSE-SU-2024:2401-1

Опубликовано: 11 июл. 2024

Источник: suse-cvrf

Описание

Security update for oniguruma

This update for oniguruma fixes the following issues:

CVE-2019-13225: Fixed null-pointer dereference in match_at() in regexec.c (bsc#1141157).

Список пакетов

Container bci/php-apache:latest

libonig4-6.7.0-150000.3.6.1

Container bci/php-fpm:latest

libonig4-6.7.0-150000.3.6.1

Container bci/php:latest

libonig4-6.7.0-150000.3.6.1

Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest

libonig4-6.7.0-150000.3.6.1

Container suse/sle-micro-rancher/5.2:latest

libonig4-6.7.0-150000.3.6.1

Container suse/sle-micro-rancher/5.3:latest

libonig4-6.7.0-150000.3.6.1

Container suse/sle-micro-rancher/5.4:latest

libonig4-6.7.0-150000.3.6.1

Container suse/sle-micro/5.5:latest

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP3-CHOST-BYOS-Aliyun

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP3-CHOST-BYOS-Azure

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP3-CHOST-BYOS-EC2

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP3-CHOST-BYOS-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP3-CHOST-BYOS-SAP-CCloud

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP4-CHOST-BYOS

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP4-CHOST-BYOS-Aliyun

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP4-CHOST-BYOS-Azure

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP4-CHOST-BYOS-EC2

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP4-CHOST-BYOS-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP4-SAP

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP4-SAP-Azure

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP4-SAP-EC2

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP4-SAP-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP4-SAPCAL

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP4-SAPCAL-Azure

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP4-SAPCAL-EC2

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP4-SAPCAL-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-BYOS-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-CHOST-BYOS-Aliyun

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-CHOST-BYOS-Azure

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-CHOST-BYOS-EC2

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-CHOST-BYOS-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-CHOST-BYOS-GDC

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-CHOST-BYOS-SAP-CCloud

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-HPC-BYOS-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-Hardened-BYOS-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-Manager-Server-5-0

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-Manager-Server-5-0-Azure-llc

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-Manager-Server-5-0-Azure-ltd

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-Manager-Server-5-0-BYOS

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-Manager-Server-5-0-EC2-llc

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-Manager-Server-5-0-EC2-ltd

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-Micro-5-5-BYOS-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-Micro-5-5-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-SAP-BYOS-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-SAP-Hardened-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-SAPCAL-Azure

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-SAPCAL-EC2

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP5-SAPCAL-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-BYOS

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-BYOS-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-CHOST-BYOS

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-CHOST-BYOS-Azure

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-CHOST-BYOS-EC2

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-CHOST-BYOS-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-CHOST-BYOS-GDC

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-HPC-BYOS-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-HPC-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-Hardened-BYOS

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-Hardened-BYOS-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-SAP

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-SAP-Azure

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-SAP-BYOS

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-SAP-BYOS-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-SAP-EC2

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-SAP-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-SAP-Hardened-GCE

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-SAPCAL

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-SAPCAL-Azure

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-SAPCAL-EC2

libonig4-6.7.0-150000.3.6.1

Image SLES15-SP6-SAPCAL-GCE

libonig4-6.7.0-150000.3.6.1

SUSE Linux Enterprise Micro 5.1

libonig4-6.7.0-150000.3.6.1

SUSE Linux Enterprise Micro 5.2

libonig4-6.7.0-150000.3.6.1

SUSE Linux Enterprise Micro 5.3

libonig4-6.7.0-150000.3.6.1

SUSE Linux Enterprise Micro 5.4

libonig4-6.7.0-150000.3.6.1

SUSE Linux Enterprise Micro 5.5

libonig4-6.7.0-150000.3.6.1

SUSE Linux Enterprise Module for Basesystem 15 SP5

libonig4-6.7.0-150000.3.6.1

oniguruma-devel-6.7.0-150000.3.6.1

SUSE Linux Enterprise Module for Basesystem 15 SP6

libonig4-6.7.0-150000.3.6.1

oniguruma-devel-6.7.0-150000.3.6.1

openSUSE Leap 15.5

libonig4-6.7.0-150000.3.6.1

oniguruma-devel-6.7.0-150000.3.6.1

openSUSE Leap 15.6

libonig4-6.7.0-150000.3.6.1

oniguruma-devel-6.7.0-150000.3.6.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20242401-1/
Link for SUSE-SU-2024:2401-1
https://lists.suse.com/pipermail/sle-updates/2024-July/035929.html
E-Mail link for SUSE-SU-2024:2401-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1141157
SUSE Bug 1141157
https://www.suse.com/security/cve/CVE-2019-13225/
SUSE CVE CVE-2019-13225 page

Описание

A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.

Затронутые продукты

Container bci/php-apache:latest:libonig4-6.7.0-150000.3.6.1

Container bci/php-fpm:latest:libonig4-6.7.0-150000.3.6.1

Container bci/php:latest:libonig4-6.7.0-150000.3.6.1

Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:libonig4-6.7.0-150000.3.6.1

Ссылки

https://www.suse.com/security/cve/CVE-2019-13225.html
CVE-2019-13225
https://bugzilla.suse.com/1141157
SUSE Bug 1141157