{"id":"CVE-2017-9228","aliases":["ALPINE-CVE-2017-9228","CLSA-2020-1605798462","CLSA-2025-1757523459","CLSA-2025-1758892974","CLSA-2025-1758892982","CLSA-2025-1758896397","CLSA-2025-1759222758","DEBIAN-CVE-2017-9228","DLA-958-1","EUVD-2017-18166","GHSA-qc5j-7652-9f34","MGASA-2017-0246","RHSA-2018:1296","SUSE-SU-2017:3237-1","SUSE-SU-2017:3277-1","SUSE-SU-2018:0003-1","SUSE-SU-2020:1570-1","UBUNTU-CVE-2017-9228","USN-3382-1"],"status":"published","title":"An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...","description":"An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.06261,"percentile":0.93611,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2017-05-24T00:00:00Z","modified":"2026-10-24T14:21:17Z","fixes":[{"ecosystem":"Alpine:v3.4","package":"php5","fixed_in":["5.6.31-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"php5","fixed_in":["5.6.31-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-bcmath","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-cli","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-common","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-dba","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-devel","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-embedded","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-enchant","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-fpm","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-gd","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-intl","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-ldap","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-mbstring","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-mysql","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-mysqlnd","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-odbc","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-pdo","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-pgsql","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-process","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-pspell","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-recode","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-snmp","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-soap","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-xml","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"php-xmlrpc","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-bcmath","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-cli","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-common","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-dba","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-devel","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-embedded","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-enchant","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-fpm","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-gd","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-intl","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-ldap","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-mbstring","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-mysql","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-mysqlnd","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-odbc","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-pdo","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-pgsql","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-process","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-pspell","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-recode","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-snmp","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-soap","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-xml","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"php-xmlrpc","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-bcmath","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-cli","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-common","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-dba","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-devel","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-embedded","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-enchant","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-fpm","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-gd","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-intl","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-ldap","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-mbstring","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-mysql","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-mysqlnd","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-odbc","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-pdo","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-pgsql","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-process","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-pspell","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-recode","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-snmp","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-soap","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-xml","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"php-xmlrpc","fixed_in":["5.4.16-48.el7.tuxcare.els15"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libonig","fixed_in":["6.1.3-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libonig","fixed_in":["6.1.3-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libonig","fixed_in":["6.1.3-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libonig","fixed_in":["5.9.1-1ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"php5","fixed_in":["5.5.9+dfsg-1ubuntu4.22"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libonig","fixed_in":["5.9.6-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"php7.0","fixed_in":["7.0.22-0ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.4","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.31-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.31-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"php-zts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-51.el6.cloudlinux"}]}],"bundled":70},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"php-zts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.3-50.el6_10.tuxcare.ol.els15"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.16-48.el7.tuxcare.els15"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ruby-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ruby-irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0.648-39.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-bigdecimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-39.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-io-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.2-39.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.7-39.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-minitest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.2-39.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-psych","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-39.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-39.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygem-rdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0-39.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygems","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14.1-39.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"rubygems-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14.1-39.el7_9.tuxcare.els11"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.3-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.3-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.3-2"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-1+deb7u1"}]}],"versions":["5.9.1-1"],"bundled":5},{"source":"osv","ecosystem":"Mageia:5","package":"libgd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1.2.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:5","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.31-1.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:6","package":"libgd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-3.1.mga6"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:6","package":"php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.31-1.mga6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-imap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-tidy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-php70-php-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el6"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-bcmath","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-dba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-dbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-enchant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-fpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-gd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-gmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-intl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-mbstring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-mysqlnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-opcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-pdo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-pgsql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-process","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-pspell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-recode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-soap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-php70-php-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.27-1.el7"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-50.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-50.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"php7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7-50.23.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.13.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.13.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.14-109.13.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-112.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-112.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"php53","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.17-112.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"yast2-ruby-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.53-9.8.1"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"yast2-ruby-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.53-9.8.1"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"yast2-ruby-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.53-9.8.1"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"yast2-ruby-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.53-9.8.1"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"ruby2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.9-19.3.2"}]}],"bundled":42},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-1ubuntu1.1"}]}],"versions":["5.9.1-1","5.9.1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.9+dfsg-1ubuntu4.22"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5","5.5.9+dfsg-1ubuntu4.6","5.5.9+dfsg-1ubuntu4.7","5.5.9+dfsg-1ubuntu4.9","5.5.9+dfsg-1ubuntu4.11","5.5.9+dfsg-1ubuntu4.12","5.5.9+dfsg-1ubuntu4.13","5.5.9+dfsg-1ubuntu4.14","5.5.9+dfsg-1ubuntu4.16","5.5.9+dfsg-1ubuntu4.17","5.5.9+dfsg-1ubuntu4.19","5.5.9+dfsg-1ubuntu4.20","5.5.9+dfsg-1ubuntu4.21"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libonig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.6-1ubuntu0.1"}]}],"versions":["5.9.6-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.22-0ubuntu0.16.04.1"}]}],"versions":["7.0.1-5","7.0.1-6","7.0.2-1","7.0.2-3","7.0.2-4","7.0.2-5","7.0.3-2","7.0.3-3","7.0.3-9ubuntu1","7.0.4-5ubuntu1","7.0.4-5ubuntu2","7.0.4-7ubuntu1","7.0.4-7ubuntu2","7.0.4-7ubuntu2.1","7.0.8-0ubuntu0.16.04.1","7.0.8-0ubuntu0.16.04.2","7.0.8-0ubuntu0.16.04.3","7.0.13-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.2","7.0.15-0ubuntu0.16.04.4","7.0.18-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.9+dfsg-1ubuntu4.22"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5","5.5.9+dfsg-1ubuntu4.6","5.5.9+dfsg-1ubuntu4.7","5.5.9+dfsg-1ubuntu4.9","5.5.9+dfsg-1ubuntu4.11","5.5.9+dfsg-1ubuntu4.12","5.5.9+dfsg-1ubuntu4.13","5.5.9+dfsg-1ubuntu4.14","5.5.9+dfsg-1ubuntu4.16","5.5.9+dfsg-1ubuntu4.17","5.5.9+dfsg-1ubuntu4.19","5.5.9+dfsg-1ubuntu4.20","5.5.9+dfsg-1ubuntu4.21"],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.22-0ubuntu0.16.04.1"}]}],"versions":["7.0.1-5","7.0.1-6","7.0.2-1","7.0.2-3","7.0.2-4","7.0.2-5","7.0.3-2","7.0.3-3","7.0.3-9ubuntu1","7.0.4-5ubuntu1","7.0.4-5ubuntu2","7.0.4-7ubuntu1","7.0.4-7ubuntu2","7.0.4-7ubuntu2.1","7.0.8-0ubuntu0.16.04.1","7.0.8-0ubuntu0.16.04.2","7.0.8-0ubuntu0.16.04.3","7.0.13-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.2","7.0.15-0ubuntu0.16.04.4","7.0.18-0ubuntu0.16.04.1"],"bundled":13}],"products":[{"vendor":"oniguruma_project","product":"oniguruma"},{"vendor":"php","product":"php"}],"references":[{"url":"https://github.com/kkos/oniguruma/commit/3b63d12038c8d8fc278e81c942fa9bec7c704c8b","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1296","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/kkos/oniguruma/issues/60","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9228","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-qc5j-7652-9f34"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-9228","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2020-1605798462.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2025-1757523459.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1758892974.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1758892982.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2025-1758896397.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2025-1759222758.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-9228","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0246.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21316","tags":["report"]},{"url":"http://php.net/ChangeLog-5.php#5.6.31","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.1_release_notes/chap-rhscl#sect-RHSCL-Changes-php","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377336","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377352","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404726","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412631","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418984","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419020","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1466730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1466736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1466739","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1466740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1466746","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471824","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1471842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1473822","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1475373","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1475522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1484837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1484838","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1484839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1512057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535251","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1296.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7412","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7412","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7412","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7413","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7413","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7413","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7414","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7414","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7414","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7416","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7416","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7416","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7417","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7417","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7417","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7418","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7418","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7418","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7479","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7479","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7479","tags":["advisory"]},{"url":"https://blog.checkpoint.com/wp-content/uploads/2016/12/PHP_Technical_Report.pdf","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9933","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9933","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9933","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9934","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9934","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9934","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9935","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9935","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9935","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9936","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9936","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9936","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10158","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10158","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10158","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10159","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10159","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10159","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10160","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10160","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10160","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10161","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10161","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10161","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10162","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10162","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10162","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10167","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10167","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10167","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10168","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10168","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10168","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5340","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5340","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5340","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7890","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7890","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7890","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9224","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9224","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9224","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9226","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9226","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9226","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9227","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9227","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9227","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9228","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9228","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9229","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9229","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9229","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-11143","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11143","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-11144","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11144","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-11145","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11145","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11145","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-11147","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11147","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11147","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-11362","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11362","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-11628","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11628","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11628","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12932","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12932","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12932","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12933","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12933","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12933","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12934","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12934","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12934","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-16642","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-16642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-16642","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5711","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5711","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5711","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5712","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5712","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5712","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173237-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1063815","tags":["report"]},{"url":"https://bugzilla.suse.com/1067441","tags":["report"]},{"url":"https://bugzilla.suse.com/1069606","tags":["report"]},{"url":"https://bugzilla.suse.com/1069631","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9229","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173277-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1067090","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4025","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180003-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201570-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1043983","tags":["report"]},{"url":"https://bugzilla.suse.com/1048072","tags":["report"]},{"url":"https://bugzilla.suse.com/1055265","tags":["report"]},{"url":"https://bugzilla.suse.com/1056286","tags":["report"]},{"url":"https://bugzilla.suse.com/1056782","tags":["report"]},{"url":"https://bugzilla.suse.com/1058754","tags":["report"]},{"url":"https://bugzilla.suse.com/1058755","tags":["report"]},{"url":"https://bugzilla.suse.com/1058757","tags":["report"]},{"url":"https://bugzilla.suse.com/1062452","tags":["report"]},{"url":"https://bugzilla.suse.com/1069607","tags":["report"]},{"url":"https://bugzilla.suse.com/1069632","tags":["report"]},{"url":"https://bugzilla.suse.com/1073002","tags":["report"]},{"url":"https://bugzilla.suse.com/1078782","tags":["report"]},{"url":"https://bugzilla.suse.com/1082007","tags":["report"]},{"url":"https://bugzilla.suse.com/1082008","tags":["report"]},{"url":"https://bugzilla.suse.com/1082009","tags":["report"]},{"url":"https://bugzilla.suse.com/1082010","tags":["report"]},{"url":"https://bugzilla.suse.com/1082011","tags":["report"]},{"url":"https://bugzilla.suse.com/1082014","tags":["report"]},{"url":"https://bugzilla.suse.com/1082058","tags":["report"]},{"url":"https://bugzilla.suse.com/1087433","tags":["report"]},{"url":"https://bugzilla.suse.com/1087434","tags":["report"]},{"url":"https://bugzilla.suse.com/1087436","tags":["report"]},{"url":"https://bugzilla.suse.com/1087437","tags":["report"]},{"url":"https://bugzilla.suse.com/1087440","tags":["report"]},{"url":"https://bugzilla.suse.com/1087441","tags":["report"]},{"url":"https://bugzilla.suse.com/1112530","tags":["report"]},{"url":"https://bugzilla.suse.com/1112532","tags":["report"]},{"url":"https://bugzilla.suse.com/1130611","tags":["report"]},{"url":"https://bugzilla.suse.com/1130617","tags":["report"]},{"url":"https://bugzilla.suse.com/1130620","tags":["report"]},{"url":"https://bugzilla.suse.com/1130622","tags":["report"]},{"url":"https://bugzilla.suse.com/1130623","tags":["report"]},{"url":"https://bugzilla.suse.com/1130627","tags":["report"]},{"url":"https://bugzilla.suse.com/1152990","tags":["report"]},{"url":"https://bugzilla.suse.com/1152992","tags":["report"]},{"url":"https://bugzilla.suse.com/1152994","tags":["report"]},{"url":"https://bugzilla.suse.com/1152995","tags":["report"]},{"url":"https://bugzilla.suse.com/1171517","tags":["report"]},{"url":"https://bugzilla.suse.com/1172275","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-9096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-0903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10663","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-9228","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3382-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3382-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-8994","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-10397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-9224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-9226","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-9227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-9229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11147","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-11628","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-9228","description":"An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption.","status":"published","published":"2017-05-24T15:00:00Z","modified":"2024-08-05T17:02:43.688Z","updated_at":"2026-11-02T14:33:13.606903Z"}],"euvd":[{"id":"EUVD-2017-18166","description":"An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption.","status":"published","published":"2017-05-24T15:00:00Z","modified":"2024-08-05T17:02:43Z","updated_at":"2026-11-03T02:23:28.642509Z"}],"ghsa":[{"id":"GHSA-qc5j-7652-9f34","title":"An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...","description":"An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption.","status":"published","published":"2022-05-14T03:27:13Z","modified":"2023-01-27T05:02:21Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:42:03.063922Z"}],"nvd":[{"id":"CVE-2017-9228","description":"An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption.","status":"published","published":"2017-05-24T15:29:00.37Z","modified":"2026-06-17T01:27:43.01Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:03:49.449157Z"}],"osv":[{"id":"ALPINE-CVE-2017-9228","description":"An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption.","status":"published","published":"2017-05-24T15:29:00.37Z","modified":"2026-06-15T18:25:25.06931523Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"CVE-2017-9228","description":"An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption.","status":"published","published":"2017-05-24T15:29:00.37Z","modified":"2026-10-24T14:21:17.198353028Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:06.868403Z"},{"id":"DEBIAN-CVE-2017-9228","description":"An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption.","status":"published","published":"2017-05-24T15:29:00.37Z","modified":"2026-09-01T20:03:51.54880123Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:29.698576Z"},{"id":"RHSA-2018:1296","title":"Red Hat Security Advisory: rh-php70-php security, bug fix, and enhancement update","status":"published","published":"2024-09-13T16:50:16Z","modified":"2026-06-29T10:20:06Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2017-9228","description":"An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption.","status":"published","published":"2017-05-24T00:00:00Z","modified":"2026-04-22T11:37:01.738505Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:16.154988Z"},{"id":"CLSA-2020-1605798462","title":"Fix of 227 CVE","description":"- Fix bug #69720: Null pointer dereference in phar_get_fp_offset()\n- Fix bug #70728: Type Confusion Vulnerability in PHP_to_XMLRPC_worker()\n- Fix bug #70661: Use After Free Vulnerability in WDDX Packet Deserialization\n- Fix bug #70741: Session WDDX Packet Deserialization Type Confusion Vulnerability\n- Fix bug #71459: Integer overflow in iptcembed()\n- Fix bug #71039: exec functions ignore length but look for NULL termination\n- Fix bug #71354: Heap corruption in tar/zip/phar parser.\n- Fix bug #71391: NULL Pointer Dereference in phar_tar_setupmetadata()\n- Fix bug #71323: Output of stream_get_meta_data can be falsified by its input\n- Fix bug #71498: Out-of-Bound Read in phar_parse_zipfile()\n- Fix bug #71587: Use-After-Free / Double-Free in WDDX Deserialize\n- Fix bug #71860: Invalid memory write in phar on filename with \\0 in name\n- Fix bug #71798: Integer Overflow in php_raw_url_encode\n- Fix bug #72837: integer overflow in bzdecompress caused heap corruption\n- Fix bug #72681: PHP Session Data Injection Vulnerability\n- Fix bug #72807: integer overflow in curl_escape caused heap corruption\n- Fix bug #72838: Integer overflow lead to heap corruption in sql_regcase\n- Fix bug #72697: select_colors write out-of-bounds\n- Fix bug #72730: imagegammacorrect allows arbitrary write access\n- Fix bug #72836: integer overflow in base64_decode caused heap corruption\n- Fix bug #72848: integer overflow in quoted_printable_encode caused heap corruption\n- Fix bug #72849: integer overflow in urlencode caused heap corruption\n- Fix bug #72850: integer overflow in php_uuencode caused heap corruption\n- Fix bug #72771: ftps:// wrapper is vulnerable to protocol downgrade attack\n- Fix bug #72749: wddx_deserialize allows illegal memory access\n- Fix bug #72750: wddx_deserialize null dereference\n- Fix bug #72790: wddx_deserialize null dereference with invalid xml\n- Fix bug #72799: wddx_deserialize null dereference in php_wddx_pop_element\n- Fix bug #73189: Memcpy negative size parameter php_resolve_path\n- Fix bug #73150: missing NULL check in dom_document_save_html\n- Fix bug #73284: heap overflow in php_ereg_replace function\n- Fix bug #73218: stack-buffer-overflow through \u0026quot;ResourceBundle\u0026quot; methods\n- Fix bug #73208: integer overflow in imap_8bit caused heap corruption\n- Fix bug #73082: string length overflow in mb_encode_* function\n- Fix bug #73174: heap overflow in php_pcre_replace_impl\n- Fix bug #73276: crash in openssl_random_pseudo_bytes function\n- Fix bug #73275: crash in openssl_encrypt function\n- Fix bug #73017: memory corruption in wordwrap function\n- Fix bug #73240: Write out of bounds at number_format\n- Fix bug #73073: CachingIterator null dereference when convert to string\n- Fix bug #73293: NULL pointer dereference in SimpleXMLElement::asXML()\n- Fix bug #73356: crash in bzcompress function\n- Fix bug #72696: imagefilltoborder stackoverflow on truecolor images\n- Fix bug #73418: Integer Overflow in \u0026quot;_php_imap_mail\u0026quot; leads Heap Overflow\n- Fix bug #73144: Use-after-free in ArrayObject Deserialization\n- Fix bug #73192: parse_url return wrong hostname\n- Fix bug #73331: NULL Pointer Dereference in WDDX Packet Deserialization with PDORow\n- Fix bug #73452: Segfault (Regression for #69152)\n- Fix bug #73631: Invalid read when wddx decodes empty boolean element\n- Fix bug #67587: Redirection loop on nginx with FPM\n- Fix bug #71465: PHAR doesn't know about litespeed\n- Fix bug #73737: FPE when parsing a tag format\n- Fix bug #73868: Fix DOS vulnerability in gdImageCreateFromGd2Ctx()\n- Fix bug #73869: Signed Integer Overflow gd_io.c\n- Fix bug #73773: Seg fault when loading hostile phar\n- Fix bug #70436: Use After Free Vulnerability in unserialize()\n- Fix bug #74603: PHP INI Parsing Stack Buffer Overflow Vulnerability\n- Fix bug #72535: arcfour encryption stream filter crashes php\n- Fix bug #72434: ZipArchive class Use After Free Vulnerability in PHP's\n  GC algorithm and unseria\n- Fix bug #72455: Heap Overflow due to integer overflows\n- Fix bug #74782: Reflected XSS in .phar 404 page\n- Fix bug #71335: Type Confusion in WDDX Packet Deserialization\n- Fix bug #76130: Heap Buffer Overflow (READ: 1786) in exif_iif_add_value\n- Fix bug #76249: stream filter convert.iconv leads to infinite loop on\n  invalid sequence\n- Fix bug #76248: Malicious LDAP-Server Response causes Crash\n- Fix bug #76129: fix for CVE-2018-5712 may not be complete\n- Fix bug #75981: stack-buffer-overflow while parsing HTTP response\n- Fix bug #74385: Locale::parseLocale() broken with some arguments\n- Fix bug #76335: \u0026quot;link(): Bad file descriptor\u0026quot; with non-ASCII path\n- Fix bug #76383: array_map on $GLOBALS returns IS_INDIRECT\n- Fix bug #73342: Vulnerability in php-fpm by changing stdin to non-blocking\n- Fix bug #76505: array_merge_recursive() is duplicating sub-array keys\n- Fix bug #76532: Integer overflow and excessive memory usage in mb_strimwidth\n- Fix bug #76548: pg_fetch_result did not fetch the next row\n- Fix bug #76488: Memory leak when fetching a BLOB field\n- Fix bug #76665: SQLite3Stmt::bindValue() with SQLITE3_FLOAT doesn't juggle\n- Fix bug #75402: Possible Memory Leak using PDO::CURSOR_SCROLL option\n- Fix bug #76517: --with-gettext= causes configure to misjudges there is no getcwd\n- Fix bug #72443: Installing shared extensions: cp: cannot stat 'modules/*':\n  No such file or dire\n- Fix bug #68175: RegexIterator pregFlags are NULL instead of 0\n- Fix bug #55146: iconv_mime_decode_headers() skips some headers\n- Fix bug #63839: iconv_mime_decode_headers function is skipping headers\n- Fix bug #60494: iconv_mime_decode does ignore special characters\n- Fix bug #68180: iconv_mime_decode can return extra characters in a header\n- Fix bug #73457: Wrong error message when fopen FTP wrapped fails to open\n  data connection\n- Fix bug #74454: Wrong exception being thrown when using ReflectionMethod\n- Fix bug #74764: Bindto IPv6 works with file_get_contents but fails with\n  stream_socket_client\n- Fix bug #75273: php_zlib_inflate_filter() may not update bytes_consumed\n- Fix bug #75696: posix_getgrnam fails to print details of group\n- Fix bug #76480: Use curl_multi_wait() so that timeouts are respected\n- Fix bug #76800: foreach inconsistent if array modified during loop\n- Fix bug #76886: Can't build xmlrpc with expat\n- Fix bug #76901: method_exists on SPL iterator passthrough method corrupts memory\n- Fix bug #77242: heap out of bounds read in xmlrpc_decode()\n- Fix bug #77247: heap buffer overflow in phar_detect_phar_fname_ext\n- Fix bug #77270: imagecolormatch Out Of Bounds Write on Heap\n- Fix bug #77370: Buffer overflow on mb regex functions - fetch_token\n- Fix bug #77380: Global out of bounds read in xmlrpc base64 code\n- Fix bug #77630: rename() across the device may allow unwanted access\n  during processing\n- Fix bug #77494: Disabling class causes segfault on member access\n- Fix bug #77431: openFile() silently truncates after a null byte\n- Fix bug #51068: DirectoryIterator glob:// don't support current path\n  relative queries\n- Fix bug #77396: Null Pointer Dereference in phar_create_or_parse_filename\n- Fix bug #77540: Invalid Read on exif_process_SOFn\n- Fix bug #77390: feof might hang on TLS streams in case of fragmented TLS records\n- Fix bug #77586: phar_tar_writeheaders_int() buffer overflow\n- Fix bug #77546: iptcembed broken function\n- Fix bug #77563: Uninitialized read in exif_process_IFD_in_MAKERNOTE\n- Fix bug #76557: heap-buffer-overflow (READ of size 48) while reading exif data\n- Fix bug #77024: SplFileObject::__toString() may return array\n- Fix bug #77945: Segmentation fault when constructing SoapClient with WSDL_CACHE_BOTH\n- Fix bug #77697: Crash on Big_Endian platform\n- Fix bug #77943: imageantialias($image, false); does not work\n- Fix bug #77944: Wrong meta pdo_type for bigint on LLP64\n- Fix bug #76717: var_export() does not create a parsable value for PHP_INT_MIN\n- Fix bug #77921: static.php.net doesn't work anymore\n- Fix bug #77934: php-fpm kill -USR2 not working\n- Fix bug #77700: Writing truecolor images as GIF ignores interlace flag\n- Fix bug #77765: FTP stream wrapper should set the directory as executable\n- Fix bug #50020: DateInterval:createDateFromString() silently fails\n- Fix bug #77742: bcpow() implementation related to gcc compiler optimization\n- Fix bug #77967: Bypassing open_basedir restrictions via file uris\n- Fix bug #77973: Uninitialized read in gdImageCreateFromXbm\n- Fix bug #77988: heap-buffer-overflow on php_jpg_get16\n- Fix bug #78192: SegFault when reuse statement after schema has changed\n- Fix bug #77124: FTP with SSL memory leak\n- Fix bug #78256: heap-buffer-overflow on exif_process_user_comment\n- Fix bug #78222: heap-buffer-overflow on exif_scan_thumbnail\n- Fix bug #77946: Bad cURL resources returned by curl_multi_info_read()\n- Fix bug #78333: Exif crash (bus error) due to wrong alignment and invalid cast\n- Fix bug #69100: Bus error from stream_copy_to_stream (file -\u0026gt; SSL stream)\n  with invalid length\n- Fix bug #76342: file_get_contents waits twice specified timeout\n- Fix bug #76859: stream_get_line skips data if used with data-generating filter\n- Fix bug #78579: mb_decode_numericentity: args number inconsistency\n- Fix bug #78910: Heap-buffer-overflow READ in exif\n- Fix bug #78878: Buffer underflow in bc_shift_addsub\n- Fix bug #78793: Use-after-free in exif parsing under memory sanitizer\n- Fix bug #78863: DirectoryIterator class silently truncates after a null byte\n- Fix bug #79099: OOB read in php_strip_tags_ex\n- Fix bug #79082: Files added to tar with Phar::buildFromIterator have\n  all-access permissions\n- Fix bug #79329: get_headers() silently truncates after a null byte\n- Fix bug #79282: Use-of-uninitialized-value in exif\n- Fix bug #61597: SimpleXMLElement doesn't include both @attributes and\n  textContent in properties\n- Fix bug #74940: DateTimeZone loose comparison always true until properties\n  are initialized.\n- Fix bug #79296: ZipArchive::open fails on empty file (libzip 1.6.0)\n- Fix bug #79330: shell_exec() silently truncates after a null byte\n- Fix bug #79364: When copy empty array, next key is unspecified.\n- Fix bug #79396: DateTime hour incorrect during DST jump forward using setTime\n- Fix bug #79410: system() swallows last chunk if it is exactly 4095 bytes\n  without newline\n- Fix bug #79424: php_zip_glob uses gl_pathc after call to globfree\n- Fix bug #79465: OOB Read in urldecode() (CVE-2020-7067)\n- Fix bug #78221: DOMNode::normalize() doesn't remove empty text nodes\n- Fix bug #78875: Long filenames cause OOM and temp files are not cleaned\n  (CVE-2019-11048)\n- Fix bug #78876: Long variables in multipart/form-data cause OOM and temp\n  files are not cleaned (CVE-2019-11048)\n- Fix bug #79514: Memory leaks while including unexistent file\n- Fix bug #79528: Different object of the same xml between 7.4.5 and 7.4.4\n- Fix bug #62890: default_socket_timeout=-1 causes connection to timeout\n- Fix bug #70362: Can't copy() large 'data://' with open_basedir\n- Fix bug #73527: Invalid memory access in php_filter_strip\n- Fix bug #74267: segfault with streams and invalid data\n- Fix bug #79787: mb_strimwidth does not trim string\n- Fix bug #79877: getimagesize function silently truncates after a null byte\n- Fix bug #68447: grapheme_extract take an extra trailing character\n- Fix bug #68825: Inconsistent exception in DirectoryIterator::getLinkTarget()\n- Fix bug #74145: wddx parsing empty boolean tag leads to SIGSEGV (CVE-2017-11143)\n- Fix bug #74651: negative-size-param (-1) in memcpy in zif_openssl_seal()\n  (CVE-2017-11144)\n- Fix bug #74435: Buffer over-read into uninitialized memory (CVE-2017-7890)\n- Fix bug #73093: Unserialize Exception object can lead to infinite loop\n  (CVE-2016-7478)\n- Fix bug #72520: Stack-based buffer overflow vulnerability in php_stream_zip_opener\n  (CVE-2016-6297)\n- Fix bug #73825: Heap out of bounds read on unserialize in finish_nested_data()\n  (CVE-2016-10161)\n- Fix bug #60491: Session module is adoptive (CVE-2011-4718)\n- Fix bug #69253: ZIP Integer Overflow leads to writing past heap boundary\n  (CVE-2015-2331)\n- Fix bug #69418: CVE-2006-7243 fix regressions in 5.4+ (CVE-2015-4025)\n- Fix bug #68598: pcntl_exec() should not allow null char (CVE-2015-4026)\n- Fix bug #69207: move_uploaded_file allows nulls in path (CVE-2015-2348)\n- Fix bug #69218: potential remote code execution with apache 2.4 apache2handler\n  (CVE-2015-3330)\n- Fix bug #69719: Incorrect handling of paths with NULs, related to bug 69353\n  (CVE-2015-4598)\n- Fix bug #69353: Missing null byte checks for paths in various PHP extensions\n  (CVE-2015-3411)\n- Fix bugs #70168, #70169, #70166, #70155: Use After Free Vulnerability in\n  unserialize() with\n  SplObjectStorage, SplDoublyLinkedList, SPLArrayObject, SPLArrayObject (CVE-2015-6831)\n- Fix bug #70019: Files extracted from archive may be placed outside of\n  destination directory (CVE-2015-6833)\n- Fix bug #70388: SOAP serialize_function_call() type confusion / RCE (CVE-2015-6836)\n- Fix bug #69782: NULL pointer dereference (CVE-2015-6837, CVE-2015-6838)\n- Fix bug #70433: Uninitialized pointer in phar_make_dirstream when zip entry\n  filename is \"/\" (CVE-2015-7804)\n- Fix bug #69923: Buffer overflow and stack smashing error in phar_fix_filepath\n  (CVE-2015-5590)\n- Fix bug #71488: Stack overflow when decompressing tar archives (CVE-2016-2554)\n- Fix bug #72061: Out-of-bounds reads in zif_grapheme_stripos with negative offset\n  (CVE-2016-4541, CVE-2016-4540)\n- Fix bug #72094: Out of bounds heap read access in exif header processing\n  (CVE-2016-4542)\n- Fix bug #72093: bcpowmod accepts negative scale and corrupts _one_ definition\n  (CVE-2016-4537)\n- Fix bug #71331: Uninitialized pointer in phar_make_dirstream() (CVE-2016-4343)\n- Fix bug #72241: get_icu_value_internal out-of-bounds read (CVE-2016-5093)\n- Fix bug #72135: Integer Overflow in php_html_entities() (CVE-2016-5094)\n- Fix bug #72114: Integer underflow / arbitrary null write in fread/gzread\n  (CVE-2016-5096)\n- Fix bug #72339: Integer Overflow in _gd2GetHeader() resulting in heap overflow\n  (CVE-2016-5766)\n- Fix bug #72340: Double Free Courruption in wddx_deserialize (CVE-2016-5772)\n- Fix bug #72613: Inadequate error handling in bzread() (CVE-2016-5399)\n- Fix bug #70480: php_url_parse_ex() buffer overflow read (CVE-2016-6288)\n- Fix bug #72513: Stack-based buffer overflow vulnerability in virtual_file_ex\n  (CVE-2016-6289)\n- Fix bug #72562: Use After Free in unserialize() with Unexpected Session\n  Deserialization (CVE-2016-6290)\n- Fix bug #72603: Out of bound read in exif_process_IFD_in_MAKERNOTE (CVE-2016-6291)\n- Fix bug #72533: locale_accept_from_http out-of-bounds access (CVE-2016-6294)\n- Fix bug #69975: PHP segfaults when accessing nvarchar(max) defined columns\n  (CVE-2015-8879)\n- Fix bug #72606: heap-buffer-overflow (write) simplestring_addn simplestring.c\n  (CVE-2016-6296)\n- Fix bug #72293: Heap overflow in mysqlnd related to BIT fields (CVE-2016-7412)\n- Fix bug #72860: wddx_deserialize use-after-free (CVE-2016-7413)\n- Fix bug #72928: Out of bound when verify signature of zip phar in phar_parse_zipfile\n  (CVE-2016-7414)\n- Fix bug #73007: SEH buffer overflow msgfmt_format_message (CVE-2016-7416)\n- Fix bug #73029: Missing type check when unserializing SplArray (CVE-2016-7417)\n- Fix bug #73065: Out-Of-Bounds Read in php_wddx_push_element of wddx.c (CVE-2016-7418)\n- Fix bug #73280: Stack Buffer Overflow in GD dynamicGetbuf (CVE-2016-8670)\n- Fix bug #73764: Crash while loading hostile phar archive (CVE-2016-10159)\n- Fix bug #73768: Memory corruption when loading hostile phar (CVE-2016-10160)\n- Fix bug #72627: Memory Leakage In exif_process_IFD_in_TIFF (CVE-2016-7128)\n- Fix bug #70350: ZipArchive::extractTo allows for directory traversal when\n  creating directories (CVE-2014-9767)\n- Fix bug #70081: SoapClient info leak / null pointer dereference via multiple\n  type confusions (CVE-2015-8835)\n- Fix bug #70121: unserialize() could lead to unexpected methods execution / NULL\n  pointer deref (CVE-2015-8876)\n- Fix bug #71906: AddressSanitizer: negative-size-param (-1) in mbfl_strcut\n  (CVE-2016-4073)\n- Fix bug #70014: openssl_random_pseudo_bytes() is not cryptographically secure\n  (CVE-2015-8867)\n- Fix bug #77371: heap buffer overflow in mb regex functions - compile_string_node\n  (CVE-2019-9023)\n- Fix bug #77381: heap buffer overflow in multibyte match_at (CVE-2019-9023)\n- Fix bug #77382: heap buffer overflow due to incorrect length in expand_case_fold_string\n  (CVE-2019-9023)\n- Fix bug #77385: buffer overflow in fetch_token (CVE-2019-9023)\n- Fix bug #77394: Buffer overflow in multibyte case folding - unicode (CVE-2019-9023)\n- Fix vulnerabilities with oniguruma: CVE-2017-9226, CVE-2017-9224, CVE-2017-9227,\n  CVE-2017-9228, CVE-2019-13224\n- Fix general vulneravilities: CVE-2014-9653, CVE-2015-0235, CVE-2015-3152,\n  CVE-2016-3074\n- Fix bug #79699: PHP parses encoded cookie names so malicious `__Host-` cookies\n  can be sent (CVE-2020-7070)\n- Fix bug #80007: Potential type confusion in unixtojd() parameter parsing","status":"published","published":"2020-10-15T12:00:00Z","modified":"2026-10-21T10:47:12.66349831Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2025-1757523459","title":"php: Fix of 4 CVEs","description":"- Fix multiple vulnerabilities in oniguruma:\n- CVE-2017-9224: out-of-bounds read in match_at()\n- CVE-2017-9226: heap buffer overflow in next_state_val()\n- CVE-2017-9227: out-of-bounds read in mbc_enc_len()\n- CVE-2017-9228: out-of-bounds heap write in bitset_set_range()","status":"published","published":"2025-09-10T16:57:43Z","modified":"2026-06-01T00:33:25.917019831Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1758892974","title":"php: Fix of CVE-2017-9228","description":"- CVE-2017-9228: fix heap out-of-bounds write in bitset_set_range() and\n  parse_char_class() functions","status":"published","published":"2025-09-26T13:23:02Z","modified":"2026-06-01T00:33:14.146345696Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1758892982","title":"php: Fix of CVE-2017-9228","description":"- CVE-2017-9228: fix heap out-of-bounds write in bitset_set_range() and\n  parse_char_class() functions","status":"published","published":"2025-09-26T13:23:06Z","modified":"2026-06-01T00:33:26.606183805Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1758896397","title":"php: Fix of CVE-2017-9228","description":"- CVE-2017-9228: fix heap out-of-bounds write in bitset_set_range() and\n  parse_char_class() functions","status":"published","published":"2025-09-26T14:20:05Z","modified":"2026-06-01T00:33:18.236329453Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1759222758","title":"ruby: Fix of 4 CVEs","description":"- CVE-2016-2337: Fix type confusion in _cancel_eval Ruby's TclTkIp class method\n  to prevent arbitrary code execution\n- CVE-2017-9224: Fix stack out-of-bounds read in match_at() during regular\n  expression searching\n- CVE-2017-9227: Fix stack out-of-bounds read in mbc_enc_len() and invalid\n  pointer dereference in  forward_search_range()\n- CVE-2017-9228: Fix heap out-of-bounds write in bitset_set_range() and\n  parse_char_class() by initializing critical local variable","status":"published","published":"2025-09-30T08:59:21Z","modified":"2026-06-01T00:33:18.223080288Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"DLA-958-1","title":"libonig - security update","status":"published","published":"2017-05-28T00:00:00Z","modified":"2026-03-09T02:08:38.15021Z","updated_at":"2026-11-02T15:46:13.584509Z"},{"id":"MGASA-2017-0246","title":"Updated php and libgd packages fix security vulnerabilities","description":"Buffer over-read into uninitialized memory in libgd (CVE-2017-7890).\n\nSecurity issues from bundled oniguruma in php-mbstring (CVE-2017-9224,\nCVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229).\n","status":"published","published":"2017-08-07T22:16:24Z","modified":"2026-04-16T06:23:28.999249169Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"SUSE-SU-2017:3237-1","title":"Security update for php7","description":"This update for php7 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2017-16642: Fix timelib_meridian error that could be used to leak information from the interpreter (bsc#1067441).\n- CVE-2017-9229: Fix invalid pointer dereference in left_adjust_char_head() (bsc#1069631).\n- CVE-2017-9228: Fix heap out-of-bounds write that occurs in bitset_set_range() during regex compilation (bsc#1069606).\n\nBugs fixed:\n\n- Fix wrong reference when serialize/unserialize an object (bsc#1063815).\n","status":"published","published":"2017-12-07T14:32:38Z","modified":"2026-02-04T03:42:20.454737Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2017:3277-1","title":"Security update for php5","description":"This update for php5 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2017-16642: Fix timelib_meridian error that could be used to leak information from the interpreter (bsc#1067441).\n- CVE-2017-4025: Fix pathname truncation in set_include_path, tempnam, rmdir, and readlink (bsc#1067090).\n- CVE-2017-9228: Fix heap out-of-bounds write that occurs in bitset_set_range() during regex compilation (bsc#1069606).\n- CVE-2017-9229: Fix invalid pointer dereference in left_adjust_char_head() (bsc#1069631).\n","status":"published","published":"2017-12-13T16:12:03Z","modified":"2026-02-04T02:57:45.835943Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0003-1","title":"Security update for php53","description":"This update for php53 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2017-16642: Fix timelib_meridian error that could be used to leak information from the interpreter (bsc#1067441).\n- CVE-2017-9228: Fix heap out-of-bounds write that occurs in bitset_set_range() during regex compilation (bsc#1069606).\n- CVE-2017-9229: Fix invalid pointer dereference in left_adjust_char_head() (bsc#1069631).\n","status":"published","published":"2018-01-02T07:47:34Z","modified":"2026-02-04T03:39:28.161386Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2020:1570-1","title":"Security update for ruby2.1","description":"This update for ruby2.1 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2015-9096: Fixed an SMTP command injection via CRLFsequences in a RCPT TO or MAIL FROM command (bsc#1043983).\n- CVE-2016-7798: Fixed an IV Reuse in GCM Mode (bsc#1055265).\n- CVE-2017-0898: Fixed a buffer underrun vulnerability in Kernel.sprintf (bsc#1058755).\n- CVE-2017-0899: Fixed an issue with malicious gem specifications, insufficient sanitation when printing gem specifications could have included terminal characters (bsc#1056286).\n- CVE-2017-0900: Fixed an issue with malicious gem specifications, the query command could have led to a denial of service attack against clients (bsc#1056286).\n- CVE-2017-0901: Fixed an issue with malicious gem specifications, potentially overwriting arbitrary files on the client system (bsc#1056286).\n- CVE-2017-0902: Fixed an issue with malicious gem specifications, that could have enabled MITM attacks against clients (bsc#1056286).\n- CVE-2017-0903: Fixed an unsafe object deserialization vulnerability (bsc#1062452).\n- CVE-2017-9228: Fixed a heap out-of-bounds write in bitset_set_range() during regex compilation (bsc#1069607).\n- CVE-2017-9229: Fixed an invalid pointer dereference in left_adjust_char_head() in oniguruma (bsc#1069632).\n- CVE-2017-10784: Fixed an escape sequence injection vulnerability in the Basic authentication of WEBrick (bsc#1058754).\n- CVE-2017-14033: Fixed a buffer underrun vulnerability in OpenSSL ASN1 decode (bsc#1058757).\n- CVE-2017-14064: Fixed an arbitrary memory exposure during a JSON.generate call (bsc#1056782).\n- CVE-2017-17405: Fixed a command injection vulnerability in Net::FTP (bsc#1073002).\n- CVE-2017-17742: Fixed an HTTP response splitting issue in WEBrick (bsc#1087434).\n- CVE-2017-17790: Fixed a command injection in lib/resolv.rb:lazy_initialize() (bsc#1078782).\n- CVE-2018-6914: Fixed an unintentional file and directory creation with directory traversal in tempfile and tmpdir (bsc#1087441).\n- CVE-2018-8777: Fixed a potential DoS caused by large requests in WEBrick (bsc#1087436).\n- CVE-2018-8778: Fixed a buffer under-read in String#unpack (bsc#1087433).\n- CVE-2018-8779: Fixed an unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket (bsc#1087440).\n- CVE-2018-8780: Fixed an unintentional directory traversal by poisoned NUL byte in Dir (bsc#1087437).\n- CVE-2018-16395: Fixed an issue with OpenSSL::X509::Name equality checking (bsc#1112530).\n- CVE-2018-16396: Fixed an issue with tainted string handling, where the flag was not propagated in Array#pack and String#unpack with some directives (bsc#1112532).\n- CVE-2018-1000073: Fixed a path traversal issue (bsc#1082007).\n- CVE-2018-1000074: Fixed an unsafe object deserialization vulnerability in gem owner, allowing arbitrary code execution with specially crafted YAML (bsc#1082008).\n- CVE-2018-1000075: Fixed an infinite loop vulnerability due to negative size in tar header causes Denial of Service (bsc#1082014).\n- CVE-2018-1000076: Fixed an improper verification of signatures in tarballs (bsc#1082009).\n- CVE-2018-1000077: Fixed an improper URL validation in the homepage attribute of ruby gems (bsc#1082010).\n- CVE-2018-1000078: Fixed a XSS vulnerability in the homepage attribute when displayed via gem server (bsc#1082011).\n- CVE-2018-1000079: Fixed a path traversal issue during gem installation allows to write to arbitrary filesystem locations (bsc#1082058).\n- CVE-2019-8320: Fixed a directory traversal issue when decompressing tar files (bsc#1130627).\n- CVE-2019-8321: Fixed an escape sequence injection vulnerability in verbose (bsc#1130623).\n- CVE-2019-8322: Fixed an escape sequence injection vulnerability in gem owner (bsc#1130622).\n- CVE-2019-8323: Fixed an escape sequence injection vulnerability in API response handling (bsc#1130620).\n- CVE-2019-8324: Fixed an issue with malicious gems that may have led to arbitrary code execution (bsc#1130617).\n- CVE-2019-8325: Fixed an escape sequence injection vulnerability in errors (bsc#1130611).\n- CVE-2019-15845: Fixed a NUL injection vulnerability in File.fnmatch and File.fnmatch? (bsc#1152994).\n- CVE-2019-16201: Fixed a regular expression denial of service vulnerability in WEBrick's digest access authentication (bsc#1152995).\n- CVE-2019-16254: Fixed an HTTP response splitting vulnerability in WEBrick (bsc#1152992).\n- CVE-2019-16255: Fixed a code injection vulnerability in Shell#[] and Shell#test (bsc#1152990).\n- CVE-2020-10663: Fixed an unsafe object creation vulnerability in JSON (bsc#1171517).\n\nNon-security issue fixed:\n\n- Add conflicts to libruby to make sure ruby and ruby-stdlib are also updated when libruby is updated (bsc#1048072).\n\nAlso yast2-ruby-bindings on SLES 12 SP2 LTSS was updated to handle the updated ruby interpreter. (bsc#1172275)\n","status":"published","published":"2020-06-09T09:16:12Z","modified":"2026-02-04T03:07:34.074987Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-3382-1","title":"php5, php7.0 vulnerabilities","description":"It was discovered that the PHP opcache created keys for files it cached\nbased on their filepath. A local attacker could possibly use this issue in\na shared hosting environment to obtain sensitive information. This issue\nonly affected Ubuntu 14.04 LTS. (CVE-2015-8994)\n\nIt was discovered that the PHP URL parser incorrectly handled certain URI\ncomponents. A remote attacker could possibly use this issue to bypass\nhostname-specific URL checks. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2016-10397)\n\nIt was discovered that PHP incorrectly handled certain boolean parameters\nwhen unserializing data. A remote attacker could possibly use this issue to\ncause PHP to crash, resulting in a denial of service. This issue only\naffected Ubuntu 14.04 LTS. (CVE-2017-11143)\n\nSebastian Li, Wei Lei, Xie Xiaofei, and Liu Yang discovered that PHP\nincorrectly handled the OpenSSL sealing function. A remote attacker could\npossibly use this issue to cause PHP to crash, resulting in a denial of\nservice. (CVE-2017-11144)\n\nWei Lei and Liu Yang discovered that the PHP date extension incorrectly\nhandled memory. A remote attacker could possibly use this issue to disclose\nsensitive information from the server. (CVE-2017-11145)\n\nIt was discovered that PHP incorrectly handled certain PHAR archives. A\nremote attacker could use this issue to cause PHP to crash or disclose\nsensitive information. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2017-11147)\n\nIt was discovered that PHP incorrectly handled locale length. A remote\nattacker could possibly use this issue to cause PHP to crash, resulting in\na denial of service. (CVE-2017-11362)\n\nWei Lei and Liu Yang discovered that PHP incorrectly handled parsing ini\nfiles. An attacker could possibly use this issue to cause PHP to crash,\nresulting in a denial of service. (CVE-2017-11628)\n\nIt was discovered that PHP mbstring incorrectly handled certain regular\nexpressions. A remote attacker could use this issue to cause PHP to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229)\n","status":"published","published":"2017-08-10T15:26:31Z","modified":"2026-04-22T09:38:12.766158Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}