CVE-2019-13225

oniguruma: This update for oniguruma fixes the following issues: - CVE-2019-13225: Fixed null-pointer dereference in match_at()...

CVE-2019-13225 is fixed in 39 products on 1 platform, first by RHSA-2020:3662, released September 8, 2020. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
6.5
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0213
82nd percentile

This update for oniguruma fixes the following issues: - CVE-2019-13225: Fixed null-pointer dereference in match_at() in regexec.c (bsc#1141157).

Where it's fixed

ProductFixed inFixReleased
Linux
apcu-panel · RHEL 8 0:5.1.17-1.module+el8.1.0+3189+a1bff096 RHSA-2020:3662 Sep 8, 2020
apcu-panel · ol 8 0:5.1.17-1.module+el8.2.0+5569+98c8b30d ELSA-2020-3662 Sep 9, 2020
libzip · RHEL 8 0:1.5.2-1.module+el8.1.0+3189+a1bff096 RHSA-2020:3662 Sep 8, 2020
libzip · ol 8 0:1.5.2-1.module+el8.2.0+5569+98c8b30d ELSA-2020-3662 Sep 9, 2020
libzip-devel · RHEL 8 0:1.5.2-1.module+el8.1.0+3189+a1bff096 RHSA-2020:3662 Sep 8, 2020
libzip-devel · ol 8 0:1.5.2-1.module+el8.2.0+5569+98c8b30d ELSA-2020-3662 Sep 9, 2020
libzip-tools · RHEL 8 0:1.5.2-1.module+el8.1.0+3189+a1bff096 RHSA-2020:3662 Sep 8, 2020
libzip-tools · ol 8 0:1.5.2-1.module+el8.2.0+5569+98c8b30d ELSA-2020-3662 Sep 9, 2020
oniguruma · RHEL 8 0:6.8.2-2.el8 RHSA-2020:4827 Nov 4, 2020
oniguruma · ol 8 0:6.8.2-2.el8 ELSA-2020-4827 Nov 10, 2020
oniguruma · opensuse-leap 15.6 6.7.0-150000.3.6.1 SUSE-SU-2024:2401-1 Jul 11, 2024
oniguruma · sles 15.6 6.7.0-150000.3.6.1 SUSE-SU-2024:2401-1 Jul 11, 2024
oniguruma-devel · RHEL 8 0:6.8.2-2.el8 RHSA-2020:4827 Nov 4, 2020
oniguruma-devel · ol 8 0:6.8.2-2.el8 ELSA-2020-4827 Nov 10, 2020
php · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-bcmath · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-bcmath · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-cli · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-cli · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-common · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-common · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-dba · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-dba · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-dbg · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-dbg · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-devel · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-devel · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-embedded · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-embedded · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-enchant · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-enchant · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-fpm · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-fpm · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-gd · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-gd · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-gmp · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-gmp · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-intl · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-intl · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-json · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-json · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-ldap · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-ldap · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-mbstring · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-mbstring · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-mysqlnd · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-mysqlnd · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-odbc · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-odbc · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-opcache · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-opcache · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-pdo · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-pdo · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-pear · RHEL 8 1:1.10.9-1.module+el8.1.0+3189+a1bff096 RHSA-2020:3662 Sep 8, 2020
php-pear · ol 8 1:1.10.9-1.module+el8.2.0+5569+98c8b30d ELSA-2020-3662 Sep 9, 2020
php-pecl-apcu · RHEL 8 0:5.1.17-1.module+el8.1.0+3189+a1bff096 RHSA-2020:3662 Sep 8, 2020
php-pecl-apcu · ol 8 0:5.1.17-1.module+el8.2.0+5569+98c8b30d ELSA-2020-3662 Sep 9, 2020
php-pecl-apcu-devel · RHEL 8 0:5.1.17-1.module+el8.1.0+3189+a1bff096 RHSA-2020:3662 Sep 8, 2020
php-pecl-apcu-devel · ol 8 0:5.1.17-1.module+el8.2.0+5569+98c8b30d ELSA-2020-3662 Sep 9, 2020
php-pecl-rrd · RHEL 8 0:2.0.1-1.module+el8.2.0+4968+1d5097db RHSA-2020:3662 Sep 8, 2020
php-pecl-rrd · ol 8 0:2.0.1-1.module+el8.2.0+5569+98c8b30d ELSA-2020-3662 Sep 9, 2020
php-pecl-xdebug · RHEL 8 0:2.8.0-1.module+el8.2.0+4968+1d5097db RHSA-2020:3662 Sep 8, 2020
php-pecl-xdebug · ol 8 0:2.8.0-1.module+el8.2.0+5569+98c8b30d ELSA-2020-3662 Sep 9, 2020
php-pecl-zip · RHEL 8 0:1.15.4-1.module+el8.1.0+3189+a1bff096 RHSA-2020:3662 Sep 8, 2020
php-pecl-zip · ol 8 0:1.15.4-1.module+el8.2.0+5569+98c8b30d ELSA-2020-3662 Sep 9, 2020
php-pgsql · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-pgsql · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-process · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-process · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-recode · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-recode · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-snmp · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-snmp · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-soap · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-soap · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-xml · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-xml · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020
php-xmlrpc · RHEL 8 0:7.3.20-1.module+el8.2.0+7373+b272fdef RHSA-2020:3662 Sep 8, 2020
php-xmlrpc · ol 8 0:7.3.20-1.module+el8.2.0+7784+4033621d ELSA-2020-3662 Sep 9, 2020

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.