Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2020-26159 (GCVE-0-2020-26159)
Vulnerability from cvelistv5
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none
Show details on NVD website{
"containers": {
"cna": {
"providerMetadata": {
"dateUpdated": "2021-02-02T20:16:32",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"rejectedReasons": [
{
"lang": "en",
"value": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-26159",
"datePublished": "2020-09-30T12:41:13",
"dateRejected": "2021-02-02T20:16:32",
"dateReserved": "2020-09-30T00:00:00",
"dateUpdated": "2021-02-02T20:16:32",
"state": "REJECTED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.0",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2020-26159\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2020-09-30T21:15:13.357\",\"lastModified\":\"2023-11-07T03:20:30.767\",\"vulnStatus\":\"Rejected\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none\"}],\"metrics\":{},\"references\":[]}}"
}
}
opensuse-su-2024:11111-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
libonig5-6.9.7.1-1.2 on GA media
Notes
Title of the patch
libonig5-6.9.7.1-1.2 on GA media
Description of the patch
These are all security issues fixed in the libonig5-6.9.7.1-1.2 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-11111
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "libonig5-6.9.7.1-1.2 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the libonig5-6.9.7.1-1.2 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-11111",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11111-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13224 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13224/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13225 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19012 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19012/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19203 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19204 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19204/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19246 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19246/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26159 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26159/"
}
],
"title": "libonig5-6.9.7.1-1.2 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:11111-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libonig5-6.9.7.1-1.2.aarch64",
"product": {
"name": "libonig5-6.9.7.1-1.2.aarch64",
"product_id": "libonig5-6.9.7.1-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "oniguruma-devel-6.9.7.1-1.2.aarch64",
"product": {
"name": "oniguruma-devel-6.9.7.1-1.2.aarch64",
"product_id": "oniguruma-devel-6.9.7.1-1.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libonig5-6.9.7.1-1.2.ppc64le",
"product": {
"name": "libonig5-6.9.7.1-1.2.ppc64le",
"product_id": "libonig5-6.9.7.1-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "oniguruma-devel-6.9.7.1-1.2.ppc64le",
"product": {
"name": "oniguruma-devel-6.9.7.1-1.2.ppc64le",
"product_id": "oniguruma-devel-6.9.7.1-1.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libonig5-6.9.7.1-1.2.s390x",
"product": {
"name": "libonig5-6.9.7.1-1.2.s390x",
"product_id": "libonig5-6.9.7.1-1.2.s390x"
}
},
{
"category": "product_version",
"name": "oniguruma-devel-6.9.7.1-1.2.s390x",
"product": {
"name": "oniguruma-devel-6.9.7.1-1.2.s390x",
"product_id": "oniguruma-devel-6.9.7.1-1.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libonig5-6.9.7.1-1.2.x86_64",
"product": {
"name": "libonig5-6.9.7.1-1.2.x86_64",
"product_id": "libonig5-6.9.7.1-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "oniguruma-devel-6.9.7.1-1.2.x86_64",
"product": {
"name": "oniguruma-devel-6.9.7.1-1.2.x86_64",
"product_id": "oniguruma-devel-6.9.7.1-1.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig5-6.9.7.1-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64"
},
"product_reference": "libonig5-6.9.7.1-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig5-6.9.7.1-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le"
},
"product_reference": "libonig5-6.9.7.1-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig5-6.9.7.1-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x"
},
"product_reference": "libonig5-6.9.7.1-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig5-6.9.7.1-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64"
},
"product_reference": "libonig5-6.9.7.1-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.9.7.1-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64"
},
"product_reference": "oniguruma-devel-6.9.7.1-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.9.7.1-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le"
},
"product_reference": "oniguruma-devel-6.9.7.1-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.9.7.1-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x"
},
"product_reference": "oniguruma-devel-6.9.7.1-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.9.7.1-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
},
"product_reference": "oniguruma-devel-6.9.7.1-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-13224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13224"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onig_new_deluxe(). Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13224",
"url": "https://www.suse.com/security/cve/CVE-2019-13224"
},
{
"category": "external",
"summary": "SUSE Bug 1142847 for CVE-2019-13224",
"url": "https://bugzilla.suse.com/1142847"
},
{
"category": "external",
"summary": "SUSE Bug 1203568 for CVE-2019-13224",
"url": "https://bugzilla.suse.com/1203568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13224"
},
{
"cve": "CVE-2019-13225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13225"
}
],
"notes": [
{
"category": "general",
"text": "A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13225",
"url": "https://www.suse.com/security/cve/CVE-2019-13225"
},
{
"category": "external",
"summary": "SUSE Bug 1141157 for CVE-2019-13225",
"url": "https://bugzilla.suse.com/1141157"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-13225"
},
{
"cve": "CVE-2019-19012",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19012"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled version). Remote attackers can cause a denial-of-service or information disclosure, or possibly have unspecified other impact, via a crafted regular expression.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19012",
"url": "https://www.suse.com/security/cve/CVE-2019-19012"
},
{
"category": "external",
"summary": "SUSE Bug 1156984 for CVE-2019-19012",
"url": "https://bugzilla.suse.com/1156984"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2019-19012"
},
{
"cve": "CVE-2019-19203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19203"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19203",
"url": "https://www.suse.com/security/cve/CVE-2019-19203"
},
{
"category": "external",
"summary": "SUSE Bug 1164550 for CVE-2019-19203",
"url": "https://bugzilla.suse.com/1164550"
},
{
"category": "external",
"summary": "SUSE Bug 1203568 for CVE-2019-19203",
"url": "https://bugzilla.suse.com/1203568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-19203"
},
{
"cve": "CVE-2019-19204",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19204"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19204",
"url": "https://www.suse.com/security/cve/CVE-2019-19204"
},
{
"category": "external",
"summary": "SUSE Bug 1164569 for CVE-2019-19204",
"url": "https://bugzilla.suse.com/1164569"
},
{
"category": "external",
"summary": "SUSE Bug 1203568 for CVE-2019-19204",
"url": "https://bugzilla.suse.com/1203568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-19204"
},
{
"cve": "CVE-2019-19246",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19246"
}
],
"notes": [
{
"category": "general",
"text": "Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19246",
"url": "https://www.suse.com/security/cve/CVE-2019-19246"
},
{
"category": "external",
"summary": "SUSE Bug 1157805 for CVE-2019-19246",
"url": "https://bugzilla.suse.com/1157805"
},
{
"category": "external",
"summary": "SUSE Bug 1203568 for CVE-2019-19246",
"url": "https://bugzilla.suse.com/1203568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2019-19246"
},
{
"cve": "CVE-2020-26159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26159"
}
],
"notes": [
{
"category": "general",
"text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26159",
"url": "https://www.suse.com/security/cve/CVE-2020-26159"
},
{
"category": "external",
"summary": "SUSE Bug 1177179 for CVE-2020-26159",
"url": "https://bugzilla.suse.com/1177179"
},
{
"category": "external",
"summary": "SUSE Bug 1203568 for CVE-2020-26159",
"url": "https://bugzilla.suse.com/1203568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:libonig5-6.9.7.1-1.2.x86_64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.aarch64",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.ppc64le",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.s390x",
"openSUSE Tumbleweed:oniguruma-devel-6.9.7.1-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-26159"
}
]
}
ghsa-jcjp-j466-5xxg
Vulnerability from github
Published
2022-05-24 17:29
Modified
2022-05-24 17:29
VLAI Severity ?
Details
In Oniguruma 6.9.5_rev1, an attacker able to supply a regular expression for compilation may be able to overflow a buffer by one byte in concat_opt_exact_str in src/regcomp.c .
{
"affected": [],
"aliases": [
"CVE-2020-26159"
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2020-09-30T21:15:00Z",
"severity": "CRITICAL"
},
"details": "In Oniguruma 6.9.5_rev1, an attacker able to supply a regular expression for compilation may be able to overflow a buffer by one byte in concat_opt_exact_str in src/regcomp.c .",
"id": "GHSA-jcjp-j466-5xxg",
"modified": "2022-05-24T17:29:52Z",
"published": "2022-05-24T17:29:52Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26159"
},
{
"type": "WEB",
"url": "https://github.com/kkos/oniguruma/issues/207"
},
{
"type": "WEB",
"url": "https://github.com/kkos/oniguruma/commit/cbe9f8bd9cfc6c3c87a60fbae58fa1a85db59df0"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2021/01/msg00025.html"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2ZCUPCKJNSUHQMXXZBRNDDGQQLBJ2ACT"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4NHVR7X5ZLXUGW3PBCPQMNFQ3OJCSMQD"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZFUJY7BUIFBTZ3IUHVHCID4JYCRDGKPS"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2020/09/30/7"
}
],
"schema_version": "1.4.0",
"severity": []
}
gsd-2020-26159
Vulnerability from gsd
Modified
2023-12-13 01:22
Details
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2020-26159",
"description": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none.",
"id": "GSD-2020-26159",
"references": [
"https://www.suse.com/security/cve/CVE-2020-26159.html",
"https://advisories.mageia.org/CVE-2020-26159.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2020-26159"
],
"details": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none.",
"id": "GSD-2020-26159",
"modified": "2023-12-13T01:22:09.309667Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-26159",
"STATE": "REJECT"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none."
}
]
}
}
}
}
suse-su-2022:3327-1
Vulnerability from csaf_suse
Published
2022-09-21 10:47
Modified
2022-09-21 10:47
Summary
Security update for oniguruma
Notes
Title of the patch
Security update for oniguruma
Description of the patch
This update for oniguruma fixes the following issues:
- CVE-2019-19246: Fixed an out of bounds access during regular
expression matching (bsc#1157805).
- CVE-2019-19204: Fixed an out of bounds access when compiling a
crafted regular expression (bsc#1164569).
- CVE-2019-19203: Fixed an out of bounds access when performing a
string search (bsc#1164550).
- CVE-2019-16163: Fixed an uncontrolled recursion issue when compiling
a crafted regular expression, which could lead to denial of service (bsc#1150130).
- CVE-2020-26159: Fixed an off-by-one buffer overflow (bsc#1177179).
- CVE-2019-13224: Fixed a potential use-after-free when handling
multiple different encodings (bsc#1142847).
Patchnames
SUSE-2022-3327,SUSE-SLE-Module-Basesystem-15-SP3-2022-3327,SUSE-SLE-Module-Basesystem-15-SP4-2022-3327,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3327,SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3327,SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3327,SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3327,SUSE-SLE-Product-SLES-15-SP1-BCL-2022-3327,SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-3327,SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3327,SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3327,SUSE-SLE-Product-SLES_SAP-15-SP1-2022-3327,SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3327,SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3327,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3327,SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3327,SUSE-SUSE-MicroOS-5.1-2022-3327,SUSE-SUSE-MicroOS-5.2-2022-3327,SUSE-Storage-6-2022-3327,SUSE-Storage-7-2022-3327,openSUSE-Leap-Micro-5.2-2022-3327,openSUSE-SLE-15.3-2022-3327,openSUSE-SLE-15.4-2022-3327
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for oniguruma",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for oniguruma fixes the following issues:\n\n- CVE-2019-19246: Fixed an out of bounds access during regular\n expression matching (bsc#1157805).\n- CVE-2019-19204: Fixed an out of bounds access when compiling a\n crafted regular expression (bsc#1164569).\n- CVE-2019-19203: Fixed an out of bounds access when performing a\n string search (bsc#1164550).\n- CVE-2019-16163: Fixed an uncontrolled recursion issue when compiling\n a crafted regular expression, which could lead to denial of service (bsc#1150130).\n- CVE-2020-26159: Fixed an off-by-one buffer overflow (bsc#1177179).\n- CVE-2019-13224: Fixed a potential use-after-free when handling\n multiple different encodings (bsc#1142847).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2022-3327,SUSE-SLE-Module-Basesystem-15-SP3-2022-3327,SUSE-SLE-Module-Basesystem-15-SP4-2022-3327,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3327,SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3327,SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3327,SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3327,SUSE-SLE-Product-SLES-15-SP1-BCL-2022-3327,SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-3327,SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3327,SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3327,SUSE-SLE-Product-SLES_SAP-15-SP1-2022-3327,SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3327,SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3327,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3327,SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3327,SUSE-SUSE-MicroOS-5.1-2022-3327,SUSE-SUSE-MicroOS-5.2-2022-3327,SUSE-Storage-6-2022-3327,SUSE-Storage-7-2022-3327,openSUSE-Leap-Micro-5.2-2022-3327,openSUSE-SLE-15.3-2022-3327,openSUSE-SLE-15.4-2022-3327",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_3327-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2022:3327-1",
"url": "https://www.suse.com/support/update/announcement/2022/suse-su-20223327-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2022:3327-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-September/012320.html"
},
{
"category": "self",
"summary": "SUSE Bug 1142847",
"url": "https://bugzilla.suse.com/1142847"
},
{
"category": "self",
"summary": "SUSE Bug 1150130",
"url": "https://bugzilla.suse.com/1150130"
},
{
"category": "self",
"summary": "SUSE Bug 1157805",
"url": "https://bugzilla.suse.com/1157805"
},
{
"category": "self",
"summary": "SUSE Bug 1164550",
"url": "https://bugzilla.suse.com/1164550"
},
{
"category": "self",
"summary": "SUSE Bug 1164569",
"url": "https://bugzilla.suse.com/1164569"
},
{
"category": "self",
"summary": "SUSE Bug 1177179",
"url": "https://bugzilla.suse.com/1177179"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13224 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13224/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-16163 page",
"url": "https://www.suse.com/security/cve/CVE-2019-16163/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19203 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19204 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19204/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-19246 page",
"url": "https://www.suse.com/security/cve/CVE-2019-19246/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26159 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26159/"
}
],
"title": "Security update for oniguruma",
"tracking": {
"current_release_date": "2022-09-21T10:47:37Z",
"generator": {
"date": "2022-09-21T10:47:37Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2022:3327-1",
"initial_release_date": "2022-09-21T10:47:37Z",
"revision_history": [
{
"date": "2022-09-21T10:47:37Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libonig4-6.7.0-150000.3.3.1.aarch64",
"product": {
"name": "libonig4-6.7.0-150000.3.3.1.aarch64",
"product_id": "libonig4-6.7.0-150000.3.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"product": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"product_id": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libonig4-6.7.0-150000.3.3.1.i586",
"product": {
"name": "libonig4-6.7.0-150000.3.3.1.i586",
"product_id": "libonig4-6.7.0-150000.3.3.1.i586"
}
},
{
"category": "product_version",
"name": "oniguruma-devel-6.7.0-150000.3.3.1.i586",
"product": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.i586",
"product_id": "oniguruma-devel-6.7.0-150000.3.3.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libonig4-6.7.0-150000.3.3.1.ppc64le",
"product": {
"name": "libonig4-6.7.0-150000.3.3.1.ppc64le",
"product_id": "libonig4-6.7.0-150000.3.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"product": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"product_id": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libonig4-6.7.0-150000.3.3.1.s390x",
"product": {
"name": "libonig4-6.7.0-150000.3.3.1.s390x",
"product_id": "libonig4-6.7.0-150000.3.3.1.s390x"
}
},
{
"category": "product_version",
"name": "oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"product": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"product_id": "oniguruma-devel-6.7.0-150000.3.3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libonig4-6.7.0-150000.3.3.1.x86_64",
"product": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64",
"product_id": "libonig4-6.7.0-150000.3.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"product": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"product_id": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP3",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP3",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP1-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP1-BCL",
"product_id": "SUSE Linux Enterprise Server 15 SP1-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_bcl:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP2-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 15 SP2-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_bcl:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Proxy 4.1",
"product": {
"name": "SUSE Manager Proxy 4.1",
"product_id": "SUSE Manager Proxy 4.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-proxy:4.1"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Retail Branch Server 4.1",
"product": {
"name": "SUSE Manager Retail Branch Server 4.1",
"product_id": "SUSE Manager Retail Branch Server 4.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-retail-branch-server:4.1"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Server 4.1",
"product": {
"name": "SUSE Manager Server 4.1",
"product_id": "SUSE Manager Server 4.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-server:4.1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.1",
"product": {
"name": "SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-microos:5.1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.2",
"product": {
"name": "SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-microos:5.2"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 6",
"product": {
"name": "SUSE Enterprise Storage 6",
"product_id": "SUSE Enterprise Storage 6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:6"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 7",
"product": {
"name": "SUSE Enterprise Storage 7",
"product_id": "SUSE Enterprise Storage 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:7"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap Micro 5.2",
"product": {
"name": "openSUSE Leap Micro 5.2",
"product_id": "openSUSE Leap Micro 5.2",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap-micro:5.2"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.3",
"product": {
"name": "openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.3"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.4",
"product": {
"name": "openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP3",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP3",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP3",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP3",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP3",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP3",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP3",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP3",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-BCL",
"product_id": "SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-BCL",
"product_id": "SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Manager Proxy 4.1",
"product_id": "SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Manager Proxy 4.1",
"product_id": "SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Manager Retail Branch Server 4.1",
"product_id": "SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Manager Retail Branch Server 4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Manager Retail Branch Server 4.1",
"product_id": "SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Manager Retail Branch Server 4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.ppc64le as component of SUSE Manager Server 4.1",
"product_id": "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Server 4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.s390x as component of SUSE Manager Server 4.1",
"product_id": "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.s390x",
"relates_to_product_reference": "SUSE Manager Server 4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Manager Server 4.1",
"product_id": "SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le as component of SUSE Manager Server 4.1",
"product_id": "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Manager Server 4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.s390x as component of SUSE Manager Server 4.1",
"product_id": "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"relates_to_product_reference": "SUSE Manager Server 4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Manager Server 4.1",
"product_id": "SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Manager Server 4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.1",
"product_id": "SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.s390x as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Enterprise Storage 6",
"product_id": "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Enterprise Storage 6",
"product_id": "SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Enterprise Storage 6",
"product_id": "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Enterprise Storage 6",
"product_id": "SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of SUSE Enterprise Storage 7",
"product_id": "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of SUSE Enterprise Storage 7",
"product_id": "SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of SUSE Enterprise Storage 7",
"product_id": "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "SUSE Enterprise Storage 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of SUSE Enterprise Storage 7",
"product_id": "SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Enterprise Storage 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of openSUSE Leap Micro 5.2",
"product_id": "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "openSUSE Leap Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of openSUSE Leap Micro 5.2",
"product_id": "openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.aarch64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.ppc64le as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.s390x as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig4-6.7.0-150000.3.3.1.x86_64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "libonig4-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.s390x as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64"
},
"product_reference": "oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-13224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13224"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onig_new_deluxe(). Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13224",
"url": "https://www.suse.com/security/cve/CVE-2019-13224"
},
{
"category": "external",
"summary": "SUSE Bug 1142847 for CVE-2019-13224",
"url": "https://bugzilla.suse.com/1142847"
},
{
"category": "external",
"summary": "SUSE Bug 1203568 for CVE-2019-13224",
"url": "https://bugzilla.suse.com/1203568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-09-21T10:47:37Z",
"details": "moderate"
}
],
"title": "CVE-2019-13224"
},
{
"cve": "CVE-2019-16163",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-16163"
}
],
"notes": [
{
"category": "general",
"text": "Oniguruma before 6.9.3 allows Stack Exhaustion in regcomp.c because of recursion in regparse.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-16163",
"url": "https://www.suse.com/security/cve/CVE-2019-16163"
},
{
"category": "external",
"summary": "SUSE Bug 1150130 for CVE-2019-16163",
"url": "https://bugzilla.suse.com/1150130"
},
{
"category": "external",
"summary": "SUSE Bug 1203568 for CVE-2019-16163",
"url": "https://bugzilla.suse.com/1203568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-09-21T10:47:37Z",
"details": "low"
}
],
"title": "CVE-2019-16163"
},
{
"cve": "CVE-2019-19203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19203"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function gb18030_mbc_enc_len in file gb18030.c, a UChar pointer is dereferenced without checking if it passed the end of the matched string. This leads to a heap-based buffer over-read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19203",
"url": "https://www.suse.com/security/cve/CVE-2019-19203"
},
{
"category": "external",
"summary": "SUSE Bug 1164550 for CVE-2019-19203",
"url": "https://bugzilla.suse.com/1164550"
},
{
"category": "external",
"summary": "SUSE Bug 1203568 for CVE-2019-19203",
"url": "https://bugzilla.suse.com/1203568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-09-21T10:47:37Z",
"details": "important"
}
],
"title": "CVE-2019-19203"
},
{
"cve": "CVE-2019-19204",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19204"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Oniguruma 6.x before 6.9.4_rc2. In the function fetch_interval_quantifier (formerly known as fetch_range_quantifier) in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19204",
"url": "https://www.suse.com/security/cve/CVE-2019-19204"
},
{
"category": "external",
"summary": "SUSE Bug 1164569 for CVE-2019-19204",
"url": "https://bugzilla.suse.com/1164569"
},
{
"category": "external",
"summary": "SUSE Bug 1203568 for CVE-2019-19204",
"url": "https://bugzilla.suse.com/1203568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-09-21T10:47:37Z",
"details": "important"
}
],
"title": "CVE-2019-19204"
},
{
"cve": "CVE-2019-19246",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-19246"
}
],
"notes": [
{
"category": "general",
"text": "Oniguruma through 6.9.3, as used in PHP 7.3.x and other products, has a heap-based buffer over-read in str_lower_case_match in regexec.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-19246",
"url": "https://www.suse.com/security/cve/CVE-2019-19246"
},
{
"category": "external",
"summary": "SUSE Bug 1157805 for CVE-2019-19246",
"url": "https://bugzilla.suse.com/1157805"
},
{
"category": "external",
"summary": "SUSE Bug 1203568 for CVE-2019-19246",
"url": "https://bugzilla.suse.com/1203568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-09-21T10:47:37Z",
"details": "important"
}
],
"title": "CVE-2019-19246"
},
{
"cve": "CVE-2020-26159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26159"
}
],
"notes": [
{
"category": "general",
"text": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26159",
"url": "https://www.suse.com/security/cve/CVE-2020-26159"
},
{
"category": "external",
"summary": "SUSE Bug 1177179 for CVE-2020-26159",
"url": "https://bugzilla.suse.com/1177179"
},
{
"category": "external",
"summary": "SUSE Bug 1203568 for CVE-2020-26159",
"url": "https://bugzilla.suse.com/1203568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 6:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Enterprise Storage 7:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-BCL:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Linux Enterprise Server 15 SP2-LTSS:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Proxy 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Retail Branch Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:libonig4-6.7.0-150000.3.3.1.x86_64",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"SUSE Manager Server 4.1:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.3:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:libonig4-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.ppc64le",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.s390x",
"openSUSE Leap 15.4:oniguruma-devel-6.7.0-150000.3.3.1.x86_64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.aarch64",
"openSUSE Leap Micro 5.2:libonig4-6.7.0-150000.3.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-09-21T10:47:37Z",
"details": "moderate"
}
],
"title": "CVE-2020-26159"
}
]
}
suse-su-2024:2993-1
Vulnerability from csaf_suse
Published
2024-08-21 10:37
Modified
2024-08-21 10:37
Summary
Security update for oniguruma
Notes
Title of the patch
Security update for oniguruma
Description of the patch
This update for oniguruma fixes the following issues:
- CVE-2020-26159: Fixed buffer overflow in concat_opt_exact_str could that could lead in DoS (bsc#1177179)
Patchnames
SUSE-2024-2993,SUSE-SLE-SDK-12-SP5-2024-2993,SUSE-SLE-SERVER-12-SP5-2024-2993
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for oniguruma",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for oniguruma fixes the following issues:\n\n- CVE-2020-26159: Fixed buffer overflow in concat_opt_exact_str could that could lead in DoS (bsc#1177179)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2024-2993,SUSE-SLE-SDK-12-SP5-2024-2993,SUSE-SLE-SERVER-12-SP5-2024-2993",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_2993-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2024:2993-1",
"url": "https://www.suse.com/support/update/announcement/2024/suse-su-20242993-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2024:2993-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2024-August/036661.html"
},
{
"category": "self",
"summary": "SUSE Bug 1177179",
"url": "https://bugzilla.suse.com/1177179"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-26159 page",
"url": "https://www.suse.com/security/cve/CVE-2020-26159/"
}
],
"title": "Security update for oniguruma",
"tracking": {
"current_release_date": "2024-08-21T10:37:46Z",
"generator": {
"date": "2024-08-21T10:37:46Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2024:2993-1",
"initial_release_date": "2024-08-21T10:37:46Z",
"revision_history": [
{
"date": "2024-08-21T10:37:46Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libonig2-5.9.2-13.6.1.aarch64",
"product": {
"name": "libonig2-5.9.2-13.6.1.aarch64",
"product_id": "libonig2-5.9.2-13.6.1.aarch64"
}
},
{
"category": "product_version",
"name": "oniguruma-devel-5.9.2-13.6.1.aarch64",
"product": {
"name": "oniguruma-devel-5.9.2-13.6.1.aarch64",
"product_id": "oniguruma-devel-5.9.2-13.6.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libonig2-5.9.2-13.6.1.i586",
"product": {
"name": "libonig2-5.9.2-13.6.1.i586",
"product_id": "libonig2-5.9.2-13.6.1.i586"
}
},
{
"category": "product_version",
"name": "oniguruma-devel-5.9.2-13.6.1.i586",
"product": {
"name": "oniguruma-devel-5.9.2-13.6.1.i586",
"product_id": "oniguruma-devel-5.9.2-13.6.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libonig2-5.9.2-13.6.1.ppc64le",
"product": {
"name": "libonig2-5.9.2-13.6.1.ppc64le",
"product_id": "libonig2-5.9.2-13.6.1.ppc64le"
}
},
{
"category": "product_version",
"name": "oniguruma-devel-5.9.2-13.6.1.ppc64le",
"product": {
"name": "oniguruma-devel-5.9.2-13.6.1.ppc64le",
"product_id": "oniguruma-devel-5.9.2-13.6.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libonig2-5.9.2-13.6.1.s390",
"product": {
"name": "libonig2-5.9.2-13.6.1.s390",
"product_id": "libonig2-5.9.2-13.6.1.s390"
}
},
{
"category": "product_version",
"name": "oniguruma-devel-5.9.2-13.6.1.s390",
"product": {
"name": "oniguruma-devel-5.9.2-13.6.1.s390",
"product_id": "oniguruma-devel-5.9.2-13.6.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "libonig2-5.9.2-13.6.1.s390x",
"product": {
"name": "libonig2-5.9.2-13.6.1.s390x",
"product_id": "libonig2-5.9.2-13.6.1.s390x"
}
},
{
"category": "product_version",
"name": "oniguruma-devel-5.9.2-13.6.1.s390x",
"product": {
"name": "oniguruma-devel-5.9.2-13.6.1.s390x",
"product_id": "oniguruma-devel-5.9.2-13.6.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libonig2-5.9.2-13.6.1.x86_64",
"product": {
"name": "libonig2-5.9.2-13.6.1.x86_64",
"product_id": "libonig2-5.9.2-13.6.1.x86_64"
}
},
{
"category": "product_version",
"name": "oniguruma-devel-5.9.2-13.6.1.x86_64",
"product": {
"name": "oniguruma-devel-5.9.2-13.6.1.x86_64",
"product_id": "oniguruma-devel-5.9.2-13.6.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-5.9.2-13.6.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.aarch64"
},
"product_reference": "oniguruma-devel-5.9.2-13.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-5.9.2-13.6.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.ppc64le"
},
"product_reference": "oniguruma-devel-5.9.2-13.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-5.9.2-13.6.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.s390x"
},
"product_reference": "oniguruma-devel-5.9.2-13.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oniguruma-devel-5.9.2-13.6.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.x86_64"
},
"product_reference": "oniguruma-devel-5.9.2-13.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig2-5.9.2-13.6.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.aarch64"
},
"product_reference": "libonig2-5.9.2-13.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig2-5.9.2-13.6.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.ppc64le"
},
"product_reference": "libonig2-5.9.2-13.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig2-5.9.2-13.6.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.s390x"
},
"product_reference": "libonig2-5.9.2-13.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig2-5.9.2-13.6.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.x86_64"
},
"product_reference": "libonig2-5.9.2-13.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig2-5.9.2-13.6.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.aarch64"
},
"product_reference": "libonig2-5.9.2-13.6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig2-5.9.2-13.6.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.ppc64le"
},
"product_reference": "libonig2-5.9.2-13.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig2-5.9.2-13.6.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.s390x"
},
"product_reference": "libonig2-5.9.2-13.6.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libonig2-5.9.2-13.6.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.x86_64"
},
"product_reference": "libonig2-5.9.2-13.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-26159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-26159"
}
],
"notes": [
{
"category": "general",
"text": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-26159",
"url": "https://www.suse.com/security/cve/CVE-2020-26159"
},
{
"category": "external",
"summary": "SUSE Bug 1177179 for CVE-2020-26159",
"url": "https://bugzilla.suse.com/1177179"
},
{
"category": "external",
"summary": "SUSE Bug 1203568 for CVE-2020-26159",
"url": "https://bugzilla.suse.com/1203568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libonig2-5.9.2-13.6.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:libonig2-5.9.2-13.6.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.aarch64",
"SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP5:oniguruma-devel-5.9.2-13.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-08-21T10:37:46Z",
"details": "moderate"
}
],
"title": "CVE-2020-26159"
}
]
}
msrc_cve-2020-26159
Vulnerability from csaf_microsoft
Published
2020-09-02 00:00
Modified
2025-10-01 23:11
Summary
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none
Notes
Additional Resources
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
Disclaimer
The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
{
"document": {
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2020-26159 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none - VEX",
"url": "https://msrc.microsoft.com/csaf/vex/2020/msrc_cve-2020-26159.json"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none",
"tracking": {
"current_release_date": "2025-10-01T23:11:05.000Z",
"generator": {
"date": "2025-10-19T18:07:00.395Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2020-26159",
"initial_release_date": "2020-09-02T00:00:00.000Z",
"revision_history": [
{
"date": "2025-10-01T23:11:05.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "1.0",
"product": {
"name": "CBL Mariner 1.0",
"product_id": "16820"
}
}
],
"category": "product_name",
"name": "Azure Linux"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003ccm1 oniguruma 6.9.5-2",
"product": {
"name": "\u003ccm1 oniguruma 6.9.5-2",
"product_id": "1"
}
},
{
"category": "product_version",
"name": "cm1 oniguruma 6.9.5-2",
"product": {
"name": "cm1 oniguruma 6.9.5-2",
"product_id": "19158"
}
}
],
"category": "product_name",
"name": "oniguruma"
}
],
"category": "vendor",
"name": "Microsoft"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "\u003ccm1 oniguruma 6.9.5-2 as a component of CBL Mariner 1.0",
"product_id": "16820-1"
},
"product_reference": "1",
"relates_to_product_reference": "16820"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cm1 oniguruma 6.9.5-2 as a component of CBL Mariner 1.0",
"product_id": "19158-16820"
},
"product_reference": "19158",
"relates_to_product_reference": "16820"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-26159",
"notes": [
{
"category": "general",
"text": "mitre",
"title": "Assigning CNA"
}
],
"product_status": {
"fixed": [
"19158-16820"
],
"known_affected": [
"16820-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-26159 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none - VEX",
"url": "https://msrc.microsoft.com/csaf/vex/2020/msrc_cve-2020-26159.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2025-10-01T23:11:05.000Z",
"details": "6.9.5-2:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
"product_ids": [
"16820-1"
],
"url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
}
],
"title": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none"
}
]
}
fkie_cve-2020-26159
Vulnerability from fkie_nvd
Published
2020-09-30 21:15
Modified
2023-11-07 03:20
Severity ?
Summary
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none
References
| URL | Tags |
|---|
Impacted products
| Vendor | Product | Version |
|---|
{
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none"
}
],
"id": "CVE-2020-26159",
"lastModified": "2023-11-07T03:20:30.767",
"metrics": {},
"published": "2020-09-30T21:15:13.357",
"references": [],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Rejected"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…