A use-after-free in onignewdeluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onignewdeluxe(). Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.
{
"binaries": [
{
"binary_version": "6.0.1-1ubuntu1",
"binary_name": "groonga"
},
{
"binary_version": "6.0.1-1ubuntu1",
"binary_name": "groonga-bin"
},
{
"binary_version": "6.0.1-1ubuntu1",
"binary_name": "groonga-examples"
},
{
"binary_version": "6.0.1-1ubuntu1",
"binary_name": "groonga-httpd"
},
{
"binary_version": "6.0.1-1ubuntu1",
"binary_name": "groonga-munin-plugins"
},
{
"binary_version": "6.0.1-1ubuntu1",
"binary_name": "groonga-plugin-suggest"
},
{
"binary_version": "6.0.1-1ubuntu1",
"binary_name": "groonga-server-common"
},
{
"binary_version": "6.0.1-1ubuntu1",
"binary_name": "groonga-server-gqtp"
},
{
"binary_version": "6.0.1-1ubuntu1",
"binary_name": "groonga-token-filter-stem"
},
{
"binary_version": "6.0.1-1ubuntu1",
"binary_name": "groonga-tokenizer-mecab"
},
{
"binary_version": "6.0.1-1ubuntu1",
"binary_name": "libgroonga-dev"
},
{
"binary_version": "6.0.1-1ubuntu1",
"binary_name": "libgroonga0"
}
]
}{
"binaries": [
{
"binary_version": "8.0.0-1",
"binary_name": "groonga"
},
{
"binary_version": "8.0.0-1",
"binary_name": "groonga-bin"
},
{
"binary_version": "8.0.0-1",
"binary_name": "groonga-examples"
},
{
"binary_version": "8.0.0-1",
"binary_name": "groonga-httpd"
},
{
"binary_version": "8.0.0-1",
"binary_name": "groonga-munin-plugins"
},
{
"binary_version": "8.0.0-1",
"binary_name": "groonga-plugin-suggest"
},
{
"binary_version": "8.0.0-1",
"binary_name": "groonga-server-common"
},
{
"binary_version": "8.0.0-1",
"binary_name": "groonga-server-gqtp"
},
{
"binary_version": "8.0.0-1",
"binary_name": "groonga-token-filter-stem"
},
{
"binary_version": "8.0.0-1",
"binary_name": "groonga-tokenizer-mecab"
},
{
"binary_version": "8.0.0-1",
"binary_name": "libgroonga-dev"
},
{
"binary_version": "8.0.0-1",
"binary_name": "libgroonga0"
}
]
}{
"binaries": [
{
"binary_version": "9.1.2-1",
"binary_name": "groonga"
},
{
"binary_version": "9.1.2-1",
"binary_name": "groonga-bin"
},
{
"binary_version": "9.1.2-1",
"binary_name": "groonga-examples"
},
{
"binary_version": "9.1.2-1",
"binary_name": "groonga-httpd"
},
{
"binary_version": "9.1.2-1",
"binary_name": "groonga-munin-plugins"
},
{
"binary_version": "9.1.2-1",
"binary_name": "groonga-plugin-suggest"
},
{
"binary_version": "9.1.2-1",
"binary_name": "groonga-server-common"
},
{
"binary_version": "9.1.2-1",
"binary_name": "groonga-server-gqtp"
},
{
"binary_version": "9.1.2-1",
"binary_name": "groonga-token-filter-stem"
},
{
"binary_version": "9.1.2-1",
"binary_name": "groonga-tokenizer-mecab"
},
{
"binary_version": "9.1.2-1",
"binary_name": "libgroonga-dev"
},
{
"binary_version": "9.1.2-1",
"binary_name": "libgroonga0"
}
]
}{
"binaries": [
{
"binary_version": "12.0.0-1",
"binary_name": "groonga"
},
{
"binary_version": "12.0.0-1",
"binary_name": "groonga-bin"
},
{
"binary_version": "12.0.0-1",
"binary_name": "groonga-examples"
},
{
"binary_version": "12.0.0-1",
"binary_name": "groonga-httpd"
},
{
"binary_version": "12.0.0-1",
"binary_name": "groonga-munin-plugins"
},
{
"binary_version": "12.0.0-1",
"binary_name": "groonga-plugin-suggest"
},
{
"binary_version": "12.0.0-1",
"binary_name": "groonga-server-common"
},
{
"binary_version": "12.0.0-1",
"binary_name": "groonga-server-gqtp"
},
{
"binary_version": "12.0.0-1",
"binary_name": "groonga-token-filter-stem"
},
{
"binary_version": "12.0.0-1",
"binary_name": "groonga-tokenizer-mecab"
},
{
"binary_version": "12.0.0-1",
"binary_name": "libgroonga-dev"
},
{
"binary_version": "12.0.0-1",
"binary_name": "libgroonga0"
}
]
}{
"binaries": [
{
"binary_version": "13.1.1+dfsg-1.1build2",
"binary_name": "groonga"
},
{
"binary_version": "13.1.1+dfsg-1.1build2",
"binary_name": "groonga-bin"
},
{
"binary_version": "13.1.1+dfsg-1.1build2",
"binary_name": "groonga-examples"
},
{
"binary_version": "13.1.1+dfsg-1.1build2",
"binary_name": "groonga-munin-plugins"
},
{
"binary_version": "13.1.1+dfsg-1.1build2",
"binary_name": "groonga-plugin-suggest"
},
{
"binary_version": "13.1.1+dfsg-1.1build2",
"binary_name": "groonga-server-common"
},
{
"binary_version": "13.1.1+dfsg-1.1build2",
"binary_name": "groonga-server-gqtp"
},
{
"binary_version": "13.1.1+dfsg-1.1build2",
"binary_name": "groonga-server-http"
},
{
"binary_version": "13.1.1+dfsg-1.1build2",
"binary_name": "groonga-token-filter-stem"
},
{
"binary_version": "13.1.1+dfsg-1.1build2",
"binary_name": "groonga-tokenizer-mecab"
},
{
"binary_version": "13.1.1+dfsg-1.1build2",
"binary_name": "libgroonga-dev"
},
{
"binary_version": "13.1.1+dfsg-1.1build2",
"binary_name": "libgroonga0t64"
}
]
}{
"binaries": [
{
"binary_version": "14.1.0+dfsg-3",
"binary_name": "groonga"
},
{
"binary_version": "14.1.0+dfsg-3",
"binary_name": "groonga-bin"
},
{
"binary_version": "14.1.0+dfsg-3",
"binary_name": "groonga-examples"
},
{
"binary_version": "14.1.0+dfsg-3",
"binary_name": "groonga-munin-plugins"
},
{
"binary_version": "14.1.0+dfsg-3",
"binary_name": "groonga-plugin-suggest"
},
{
"binary_version": "14.1.0+dfsg-3",
"binary_name": "groonga-server-common"
},
{
"binary_version": "14.1.0+dfsg-3",
"binary_name": "groonga-server-gqtp"
},
{
"binary_version": "14.1.0+dfsg-3",
"binary_name": "groonga-server-http"
},
{
"binary_version": "14.1.0+dfsg-3",
"binary_name": "groonga-token-filter-stem"
},
{
"binary_version": "14.1.0+dfsg-3",
"binary_name": "groonga-tokenizer-mecab"
},
{
"binary_version": "14.1.0+dfsg-3",
"binary_name": "libgroonga-dev"
},
{
"binary_version": "14.1.0+dfsg-3",
"binary_name": "libgroonga0t64"
}
]
}{
"binaries": [
{
"binary_version": "15.1.5+dfsg-2",
"binary_name": "groonga"
},
{
"binary_version": "15.1.5+dfsg-2",
"binary_name": "groonga-bin"
},
{
"binary_version": "15.1.5+dfsg-2",
"binary_name": "groonga-examples"
},
{
"binary_version": "15.1.5+dfsg-2",
"binary_name": "groonga-munin-plugins"
},
{
"binary_version": "15.1.5+dfsg-2",
"binary_name": "groonga-plugin-suggest"
},
{
"binary_version": "15.1.5+dfsg-2",
"binary_name": "groonga-server-common"
},
{
"binary_version": "15.1.5+dfsg-2",
"binary_name": "groonga-server-gqtp"
},
{
"binary_version": "15.1.5+dfsg-2",
"binary_name": "groonga-server-http"
},
{
"binary_version": "15.1.5+dfsg-2",
"binary_name": "groonga-token-filter-stem"
},
{
"binary_version": "15.1.5+dfsg-2",
"binary_name": "groonga-tokenizer-mecab"
},
{
"binary_version": "15.1.5+dfsg-2",
"binary_name": "libgroonga-dev"
},
{
"binary_version": "15.1.5+dfsg-2",
"binary_name": "libgroonga0t64"
}
]
}{
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "libapache2-mod-php5"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "libapache2-mod-php5filter"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "libphp5-embed"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php-pear"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-cgi"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-cli"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-common"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-curl"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-dev"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-enchant"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-fpm"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-gd"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-gmp"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-intl"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-ldap"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-mysql"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-mysqlnd"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-odbc"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-pgsql"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-pspell"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-readline"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-recode"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-snmp"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-sqlite"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-sybase"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-tidy"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-xmlrpc"
},
{
"binary_version": "5.5.9+dfsg-1ubuntu4.29+esm4",
"binary_name": "php5-xsl"
}
]
}