A use-after-free in onignewdeluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onignewdeluxe(). Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.
{
"binaries": [
{
"binary_name": "groonga",
"binary_version": "6.0.1-1ubuntu1"
},
{
"binary_name": "groonga-bin",
"binary_version": "6.0.1-1ubuntu1"
},
{
"binary_name": "groonga-examples",
"binary_version": "6.0.1-1ubuntu1"
},
{
"binary_name": "groonga-httpd",
"binary_version": "6.0.1-1ubuntu1"
},
{
"binary_name": "groonga-munin-plugins",
"binary_version": "6.0.1-1ubuntu1"
},
{
"binary_name": "groonga-plugin-suggest",
"binary_version": "6.0.1-1ubuntu1"
},
{
"binary_name": "groonga-server-common",
"binary_version": "6.0.1-1ubuntu1"
},
{
"binary_name": "groonga-server-gqtp",
"binary_version": "6.0.1-1ubuntu1"
},
{
"binary_name": "groonga-token-filter-stem",
"binary_version": "6.0.1-1ubuntu1"
},
{
"binary_name": "groonga-tokenizer-mecab",
"binary_version": "6.0.1-1ubuntu1"
},
{
"binary_name": "libgroonga-dev",
"binary_version": "6.0.1-1ubuntu1"
},
{
"binary_name": "libgroonga0",
"binary_version": "6.0.1-1ubuntu1"
}
]
}{
"binaries": [
{
"binary_name": "groonga",
"binary_version": "8.0.0-1"
},
{
"binary_name": "groonga-bin",
"binary_version": "8.0.0-1"
},
{
"binary_name": "groonga-examples",
"binary_version": "8.0.0-1"
},
{
"binary_name": "groonga-httpd",
"binary_version": "8.0.0-1"
},
{
"binary_name": "groonga-munin-plugins",
"binary_version": "8.0.0-1"
},
{
"binary_name": "groonga-plugin-suggest",
"binary_version": "8.0.0-1"
},
{
"binary_name": "groonga-server-common",
"binary_version": "8.0.0-1"
},
{
"binary_name": "groonga-server-gqtp",
"binary_version": "8.0.0-1"
},
{
"binary_name": "groonga-token-filter-stem",
"binary_version": "8.0.0-1"
},
{
"binary_name": "groonga-tokenizer-mecab",
"binary_version": "8.0.0-1"
},
{
"binary_name": "libgroonga-dev",
"binary_version": "8.0.0-1"
},
{
"binary_name": "libgroonga0",
"binary_version": "8.0.0-1"
}
]
}{
"binaries": [
{
"binary_name": "groonga",
"binary_version": "9.1.2-1"
},
{
"binary_name": "groonga-bin",
"binary_version": "9.1.2-1"
},
{
"binary_name": "groonga-examples",
"binary_version": "9.1.2-1"
},
{
"binary_name": "groonga-httpd",
"binary_version": "9.1.2-1"
},
{
"binary_name": "groonga-munin-plugins",
"binary_version": "9.1.2-1"
},
{
"binary_name": "groonga-plugin-suggest",
"binary_version": "9.1.2-1"
},
{
"binary_name": "groonga-server-common",
"binary_version": "9.1.2-1"
},
{
"binary_name": "groonga-server-gqtp",
"binary_version": "9.1.2-1"
},
{
"binary_name": "groonga-token-filter-stem",
"binary_version": "9.1.2-1"
},
{
"binary_name": "groonga-tokenizer-mecab",
"binary_version": "9.1.2-1"
},
{
"binary_name": "libgroonga-dev",
"binary_version": "9.1.2-1"
},
{
"binary_name": "libgroonga0",
"binary_version": "9.1.2-1"
}
]
}{
"binaries": [
{
"binary_name": "groonga",
"binary_version": "12.0.0-1"
},
{
"binary_name": "groonga-bin",
"binary_version": "12.0.0-1"
},
{
"binary_name": "groonga-examples",
"binary_version": "12.0.0-1"
},
{
"binary_name": "groonga-httpd",
"binary_version": "12.0.0-1"
},
{
"binary_name": "groonga-munin-plugins",
"binary_version": "12.0.0-1"
},
{
"binary_name": "groonga-plugin-suggest",
"binary_version": "12.0.0-1"
},
{
"binary_name": "groonga-server-common",
"binary_version": "12.0.0-1"
},
{
"binary_name": "groonga-server-gqtp",
"binary_version": "12.0.0-1"
},
{
"binary_name": "groonga-token-filter-stem",
"binary_version": "12.0.0-1"
},
{
"binary_name": "groonga-tokenizer-mecab",
"binary_version": "12.0.0-1"
},
{
"binary_name": "libgroonga-dev",
"binary_version": "12.0.0-1"
},
{
"binary_name": "libgroonga0",
"binary_version": "12.0.0-1"
}
]
}{
"binaries": [
{
"binary_name": "groonga",
"binary_version": "13.1.1+dfsg-1.1build2"
},
{
"binary_name": "groonga-bin",
"binary_version": "13.1.1+dfsg-1.1build2"
},
{
"binary_name": "groonga-examples",
"binary_version": "13.1.1+dfsg-1.1build2"
},
{
"binary_name": "groonga-munin-plugins",
"binary_version": "13.1.1+dfsg-1.1build2"
},
{
"binary_name": "groonga-plugin-suggest",
"binary_version": "13.1.1+dfsg-1.1build2"
},
{
"binary_name": "groonga-server-common",
"binary_version": "13.1.1+dfsg-1.1build2"
},
{
"binary_name": "groonga-server-gqtp",
"binary_version": "13.1.1+dfsg-1.1build2"
},
{
"binary_name": "groonga-server-http",
"binary_version": "13.1.1+dfsg-1.1build2"
},
{
"binary_name": "groonga-token-filter-stem",
"binary_version": "13.1.1+dfsg-1.1build2"
},
{
"binary_name": "groonga-tokenizer-mecab",
"binary_version": "13.1.1+dfsg-1.1build2"
},
{
"binary_name": "libgroonga-dev",
"binary_version": "13.1.1+dfsg-1.1build2"
},
{
"binary_name": "libgroonga0t64",
"binary_version": "13.1.1+dfsg-1.1build2"
}
]
}{
"binaries": [
{
"binary_name": "groonga",
"binary_version": "14.1.0+dfsg-3"
},
{
"binary_name": "groonga-bin",
"binary_version": "14.1.0+dfsg-3"
},
{
"binary_name": "groonga-examples",
"binary_version": "14.1.0+dfsg-3"
},
{
"binary_name": "groonga-munin-plugins",
"binary_version": "14.1.0+dfsg-3"
},
{
"binary_name": "groonga-plugin-suggest",
"binary_version": "14.1.0+dfsg-3"
},
{
"binary_name": "groonga-server-common",
"binary_version": "14.1.0+dfsg-3"
},
{
"binary_name": "groonga-server-gqtp",
"binary_version": "14.1.0+dfsg-3"
},
{
"binary_name": "groonga-server-http",
"binary_version": "14.1.0+dfsg-3"
},
{
"binary_name": "groonga-token-filter-stem",
"binary_version": "14.1.0+dfsg-3"
},
{
"binary_name": "groonga-tokenizer-mecab",
"binary_version": "14.1.0+dfsg-3"
},
{
"binary_name": "libgroonga-dev",
"binary_version": "14.1.0+dfsg-3"
},
{
"binary_name": "libgroonga0t64",
"binary_version": "14.1.0+dfsg-3"
}
]
}{
"binaries": [
{
"binary_name": "groonga",
"binary_version": "15.1.5+dfsg-2"
},
{
"binary_name": "groonga-bin",
"binary_version": "15.1.5+dfsg-2"
},
{
"binary_name": "groonga-examples",
"binary_version": "15.1.5+dfsg-2"
},
{
"binary_name": "groonga-munin-plugins",
"binary_version": "15.1.5+dfsg-2"
},
{
"binary_name": "groonga-plugin-suggest",
"binary_version": "15.1.5+dfsg-2"
},
{
"binary_name": "groonga-server-common",
"binary_version": "15.1.5+dfsg-2"
},
{
"binary_name": "groonga-server-gqtp",
"binary_version": "15.1.5+dfsg-2"
},
{
"binary_name": "groonga-server-http",
"binary_version": "15.1.5+dfsg-2"
},
{
"binary_name": "groonga-token-filter-stem",
"binary_version": "15.1.5+dfsg-2"
},
{
"binary_name": "groonga-tokenizer-mecab",
"binary_version": "15.1.5+dfsg-2"
},
{
"binary_name": "libgroonga-dev",
"binary_version": "15.1.5+dfsg-2"
},
{
"binary_name": "libgroonga0t64",
"binary_version": "15.1.5+dfsg-2"
}
]
}{
"binaries": [
{
"binary_name": "libapache2-mod-php5",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "libapache2-mod-php5filter",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "libphp5-embed",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php-pear",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-cgi",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-cli",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-common",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-curl",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-dev",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-enchant",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-fpm",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-gd",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-gmp",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-intl",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-ldap",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-mysql",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-mysqlnd",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-odbc",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-pgsql",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-pspell",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-readline",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-recode",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-snmp",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-sqlite",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-sybase",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-tidy",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-xmlrpc",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
},
{
"binary_name": "php5-xsl",
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}